--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"info","ts":"2026-07-07T16:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41b5b60b69cb3e49c71f31910cc990a2bac7c694b00aa2a421e17a5e0b89d609"}
{"level":"info","ts":"2026-07-07T16:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9632dd304704d4d0b7b48f454343bfdda29872f7cd7cd34798e3bdc51a5ea9b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41b5b60b69cb3e49c71f31910cc990a2bac7c694b00aa2a421e17a5e0b89d609","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9632dd304704d4d0b7b48f454343bfdda29872f7cd7cd34798e3bdc51a5ea9b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:15:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:15:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9632dd304704d4d0b7b48f454343bfdda29872f7cd7cd34798e3bdc51a5ea9b7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9632dd304704d4d0b7b48f454343bfdda29872f7cd7cd34798e3bdc51a5ea9b7"}
{"level":"debug","ts":"2026-07-07T16:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9632dd304704d4d0b7b48f454343bfdda29872f7cd7cd34798e3bdc51a5ea9b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:15:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:15:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9632dd304704d4d0b7b48f454343bfdda29872f7cd7cd34798e3bdc51a5ea9b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9632dd304704d4d0b7b48f454343bfdda29872f7cd7cd34798e3bdc51a5ea9b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9632dd304704d4d0b7b48f454343bfdda29872f7cd7cd34798e3bdc51a5ea9b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:15:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:15:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9632dd304704d4d0b7b48f454343bfdda29872f7cd7cd34798e3bdc51a5ea9b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41b5b60b69cb3e49c71f31910cc990a2bac7c694b00aa2a421e17a5e0b89d609"}
{"level":"error","ts":"2026-07-07T16:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9632dd304704d4d0b7b48f454343bfdda29872f7cd7cd34798e3bdc51a5ea9b7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9632dd304704d4d0b7b48f454343bfdda29872f7cd7cd34798e3bdc51a5ea9b7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T16:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9632dd304704d4d0b7b48f454343bfdda29872f7cd7cd34798e3bdc51a5ea9b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:15:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:15:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9632dd304704d4d0b7b48f454343bfdda29872f7cd7cd34798e3bdc51a5ea9b7"}
{"level":"info","ts":"2026-07-07T16:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9632dd304704d4d0b7b48f454343bfdda29872f7cd7cd34798e3bdc51a5ea9b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9632dd304704d4d0b7b48f454343bfdda29872f7cd7cd34798e3bdc51a5ea9b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:15:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:15:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T16:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9632dd304704d4d0b7b48f454343bfdda29872f7cd7cd34798e3bdc51a5ea9b7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9632dd304704d4d0b7b48f454343bfdda29872f7cd7cd34798e3bdc51a5ea9b7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T16:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9632dd304704d4d0b7b48f454343bfdda29872f7cd7cd34798e3bdc51a5ea9b7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9632dd304704d4d0b7b48f454343bfdda29872f7cd7cd34798e3bdc51a5ea9b7"}
{"level":"debug","ts":"2026-07-07T16:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9632dd304704d4d0b7b48f454343bfdda29872f7cd7cd34798e3bdc51a5ea9b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:15:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:15:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9632dd304704d4d0b7b48f454343bfdda29872f7cd7cd34798e3bdc51a5ea9b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9632dd304704d4d0b7b48f454343bfdda29872f7cd7cd34798e3bdc51a5ea9b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9632dd304704d4d0b7b48f454343bfdda29872f7cd7cd34798e3bdc51a5ea9b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:15:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:15:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9632dd304704d4d0b7b48f454343bfdda29872f7cd7cd34798e3bdc51a5ea9b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9632dd304704d4d0b7b48f454343bfdda29872f7cd7cd34798e3bdc51a5ea9b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9632dd304704d4d0b7b48f454343bfdda29872f7cd7cd34798e3bdc51a5ea9b7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9632dd304704d4d0b7b48f454343bfdda29872f7cd7cd34798e3bdc51a5ea9b7"}
{"level":"debug","ts":"2026-07-07T16:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9632dd304704d4d0b7b48f454343bfdda29872f7cd7cd34798e3bdc51a5ea9b7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9632dd304704d4d0b7b48f454343bfdda29872f7cd7cd34798e3bdc51a5ea9b7"}
{"level":"debug","ts":"2026-07-07T16:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9632dd304704d4d0b7b48f454343bfdda29872f7cd7cd34798e3bdc51a5ea9b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:15:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:15:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9632dd304704d4d0b7b48f454343bfdda29872f7cd7cd34798e3bdc51a5ea9b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9632dd304704d4d0b7b48f454343bfdda29872f7cd7cd34798e3bdc51a5ea9b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9632dd304704d4d0b7b48f454343bfdda29872f7cd7cd34798e3bdc51a5ea9b7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9632dd304704d4d0b7b48f454343bfdda29872f7cd7cd34798e3bdc51a5ea9b7"}
{"level":"info","ts":"2026-07-07T16:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8c9d6465085ea2107083146815cf4801ddd9c411b5def0f49318a94c51f43098"}
{"level":"info","ts":"2026-07-07T16:15:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7f1b7f7dda11bb6b39b18f199ae98ac67b7276502f898cace8ae8a5025968fe7"}
{"level":"info","ts":"2026-07-07T16:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/41b5b60b69cb3e49c71f31910cc990a2bac7c694b00aa2a421e17a5e0b89d609"}
{"level":"info","ts":"2026-07-07T16:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9632dd304704d4d0b7b48f454343bfdda29872f7cd7cd34798e3bdc51a5ea9b7"}
{"level":"debug","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39755643a2186344fcecae3979bf3bd8ff0ccee87824bbaee6a8bfe87e09c92d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:16:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:16:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39755643a2186344fcecae3979bf3bd8ff0ccee87824bbaee6a8bfe87e09c92d"}
{"level":"info","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39755643a2186344fcecae3979bf3bd8ff0ccee87824bbaee6a8bfe87e09c92d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39755643a2186344fcecae3979bf3bd8ff0ccee87824bbaee6a8bfe87e09c92d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:16:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:16:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39755643a2186344fcecae3979bf3bd8ff0ccee87824bbaee6a8bfe87e09c92d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39755643a2186344fcecae3979bf3bd8ff0ccee87824bbaee6a8bfe87e09c92d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:16:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:16:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39755643a2186344fcecae3979bf3bd8ff0ccee87824bbaee6a8bfe87e09c92d"}
{"level":"error","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"39755643a2186344fcecae3979bf3bd8ff0ccee87824bbaee6a8bfe87e09c92d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"39755643a2186344fcecae3979bf3bd8ff0ccee87824bbaee6a8bfe87e09c92d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39755643a2186344fcecae3979bf3bd8ff0ccee87824bbaee6a8bfe87e09c92d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39755643a2186344fcecae3979bf3bd8ff0ccee87824bbaee6a8bfe87e09c92d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39755643a2186344fcecae3979bf3bd8ff0ccee87824bbaee6a8bfe87e09c92d"}
{"level":"debug","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee7c441afcf75013790e9eb98f6b3d8b8b32c9f6458fa6f1889675f87173f2bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:16:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:16:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee7c441afcf75013790e9eb98f6b3d8b8b32c9f6458fa6f1889675f87173f2bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee7c441afcf75013790e9eb98f6b3d8b8b32c9f6458fa6f1889675f87173f2bd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee7c441afcf75013790e9eb98f6b3d8b8b32c9f6458fa6f1889675f87173f2bd"}
{"level":"debug","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee7c441afcf75013790e9eb98f6b3d8b8b32c9f6458fa6f1889675f87173f2bd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee7c441afcf75013790e9eb98f6b3d8b8b32c9f6458fa6f1889675f87173f2bd"}
{"level":"debug","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39755643a2186344fcecae3979bf3bd8ff0ccee87824bbaee6a8bfe87e09c92d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39755643a2186344fcecae3979bf3bd8ff0ccee87824bbaee6a8bfe87e09c92d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39755643a2186344fcecae3979bf3bd8ff0ccee87824bbaee6a8bfe87e09c92d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee7c441afcf75013790e9eb98f6b3d8b8b32c9f6458fa6f1889675f87173f2bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee7c441afcf75013790e9eb98f6b3d8b8b32c9f6458fa6f1889675f87173f2bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee7c441afcf75013790e9eb98f6b3d8b8b32c9f6458fa6f1889675f87173f2bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39755643a2186344fcecae3979bf3bd8ff0ccee87824bbaee6a8bfe87e09c92d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:16:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:16:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39755643a2186344fcecae3979bf3bd8ff0ccee87824bbaee6a8bfe87e09c92d"}
{"level":"info","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39755643a2186344fcecae3979bf3bd8ff0ccee87824bbaee6a8bfe87e09c92d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee7c441afcf75013790e9eb98f6b3d8b8b32c9f6458fa6f1889675f87173f2bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:16:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:16:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee7c441afcf75013790e9eb98f6b3d8b8b32c9f6458fa6f1889675f87173f2bd"}
{"level":"info","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee7c441afcf75013790e9eb98f6b3d8b8b32c9f6458fa6f1889675f87173f2bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39755643a2186344fcecae3979bf3bd8ff0ccee87824bbaee6a8bfe87e09c92d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee7c441afcf75013790e9eb98f6b3d8b8b32c9f6458fa6f1889675f87173f2bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee7c441afcf75013790e9eb98f6b3d8b8b32c9f6458fa6f1889675f87173f2bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39755643a2186344fcecae3979bf3bd8ff0ccee87824bbaee6a8bfe87e09c92d"}
{"level":"info","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee7c441afcf75013790e9eb98f6b3d8b8b32c9f6458fa6f1889675f87173f2bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39755643a2186344fcecae3979bf3bd8ff0ccee87824bbaee6a8bfe87e09c92d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39755643a2186344fcecae3979bf3bd8ff0ccee87824bbaee6a8bfe87e09c92d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee7c441afcf75013790e9eb98f6b3d8b8b32c9f6458fa6f1889675f87173f2bd"}
{"level":"info","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39755643a2186344fcecae3979bf3bd8ff0ccee87824bbaee6a8bfe87e09c92d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee7c441afcf75013790e9eb98f6b3d8b8b32c9f6458fa6f1889675f87173f2bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:16:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:16:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee7c441afcf75013790e9eb98f6b3d8b8b32c9f6458fa6f1889675f87173f2bd"}
{"level":"info","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee7c441afcf75013790e9eb98f6b3d8b8b32c9f6458fa6f1889675f87173f2bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39755643a2186344fcecae3979bf3bd8ff0ccee87824bbaee6a8bfe87e09c92d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:16:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:16:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39755643a2186344fcecae3979bf3bd8ff0ccee87824bbaee6a8bfe87e09c92d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee7c441afcf75013790e9eb98f6b3d8b8b32c9f6458fa6f1889675f87173f2bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee7c441afcf75013790e9eb98f6b3d8b8b32c9f6458fa6f1889675f87173f2bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39755643a2186344fcecae3979bf3bd8ff0ccee87824bbaee6a8bfe87e09c92d"}
{"level":"info","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee7c441afcf75013790e9eb98f6b3d8b8b32c9f6458fa6f1889675f87173f2bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39755643a2186344fcecae3979bf3bd8ff0ccee87824bbaee6a8bfe87e09c92d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39755643a2186344fcecae3979bf3bd8ff0ccee87824bbaee6a8bfe87e09c92d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee7c441afcf75013790e9eb98f6b3d8b8b32c9f6458fa6f1889675f87173f2bd"}
{"level":"info","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39755643a2186344fcecae3979bf3bd8ff0ccee87824bbaee6a8bfe87e09c92d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee7c441afcf75013790e9eb98f6b3d8b8b32c9f6458fa6f1889675f87173f2bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39755643a2186344fcecae3979bf3bd8ff0ccee87824bbaee6a8bfe87e09c92d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:16:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:16:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39755643a2186344fcecae3979bf3bd8ff0ccee87824bbaee6a8bfe87e09c92d"}
{"level":"info","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39755643a2186344fcecae3979bf3bd8ff0ccee87824bbaee6a8bfe87e09c92d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39755643a2186344fcecae3979bf3bd8ff0ccee87824bbaee6a8bfe87e09c92d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39755643a2186344fcecae3979bf3bd8ff0ccee87824bbaee6a8bfe87e09c92d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39755643a2186344fcecae3979bf3bd8ff0ccee87824bbaee6a8bfe87e09c92d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39755643a2186344fcecae3979bf3bd8ff0ccee87824bbaee6a8bfe87e09c92d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39755643a2186344fcecae3979bf3bd8ff0ccee87824bbaee6a8bfe87e09c92d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee7c441afcf75013790e9eb98f6b3d8b8b32c9f6458fa6f1889675f87173f2bd"}
{"level":"error","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"39755643a2186344fcecae3979bf3bd8ff0ccee87824bbaee6a8bfe87e09c92d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"39755643a2186344fcecae3979bf3bd8ff0ccee87824bbaee6a8bfe87e09c92d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39755643a2186344fcecae3979bf3bd8ff0ccee87824bbaee6a8bfe87e09c92d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:16:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:16:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39755643a2186344fcecae3979bf3bd8ff0ccee87824bbaee6a8bfe87e09c92d"}
{"level":"info","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39755643a2186344fcecae3979bf3bd8ff0ccee87824bbaee6a8bfe87e09c92d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39755643a2186344fcecae3979bf3bd8ff0ccee87824bbaee6a8bfe87e09c92d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:16:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:16:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"39755643a2186344fcecae3979bf3bd8ff0ccee87824bbaee6a8bfe87e09c92d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"39755643a2186344fcecae3979bf3bd8ff0ccee87824bbaee6a8bfe87e09c92d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7177d4470958645e7b8b4a2fd209c363f466d77d410e3781d4ba5def65d0ce0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:16:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:16:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39755643a2186344fcecae3979bf3bd8ff0ccee87824bbaee6a8bfe87e09c92d"}
{"level":"info","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7177d4470958645e7b8b4a2fd209c363f466d77d410e3781d4ba5def65d0ce0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39755643a2186344fcecae3979bf3bd8ff0ccee87824bbaee6a8bfe87e09c92d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39755643a2186344fcecae3979bf3bd8ff0ccee87824bbaee6a8bfe87e09c92d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7177d4470958645e7b8b4a2fd209c363f466d77d410e3781d4ba5def65d0ce0b"}
{"level":"info","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39755643a2186344fcecae3979bf3bd8ff0ccee87824bbaee6a8bfe87e09c92d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7177d4470958645e7b8b4a2fd209c363f466d77d410e3781d4ba5def65d0ce0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7177d4470958645e7b8b4a2fd209c363f466d77d410e3781d4ba5def65d0ce0b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39755643a2186344fcecae3979bf3bd8ff0ccee87824bbaee6a8bfe87e09c92d"}
{"level":"info","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7177d4470958645e7b8b4a2fd209c363f466d77d410e3781d4ba5def65d0ce0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39755643a2186344fcecae3979bf3bd8ff0ccee87824bbaee6a8bfe87e09c92d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7177d4470958645e7b8b4a2fd209c363f466d77d410e3781d4ba5def65d0ce0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:16:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:16:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7177d4470958645e7b8b4a2fd209c363f466d77d410e3781d4ba5def65d0ce0b"}
{"level":"info","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7177d4470958645e7b8b4a2fd209c363f466d77d410e3781d4ba5def65d0ce0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7177d4470958645e7b8b4a2fd209c363f466d77d410e3781d4ba5def65d0ce0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7177d4470958645e7b8b4a2fd209c363f466d77d410e3781d4ba5def65d0ce0b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7177d4470958645e7b8b4a2fd209c363f466d77d410e3781d4ba5def65d0ce0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7177d4470958645e7b8b4a2fd209c363f466d77d410e3781d4ba5def65d0ce0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7177d4470958645e7b8b4a2fd209c363f466d77d410e3781d4ba5def65d0ce0b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39755643a2186344fcecae3979bf3bd8ff0ccee87824bbaee6a8bfe87e09c92d"}
{"level":"error","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7177d4470958645e7b8b4a2fd209c363f466d77d410e3781d4ba5def65d0ce0b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7177d4470958645e7b8b4a2fd209c363f466d77d410e3781d4ba5def65d0ce0b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55892b463fa864b69bcb768c8dbd385c5e9dd138f9d01e1a011a909938ca2d42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:16:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:16:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55892b463fa864b69bcb768c8dbd385c5e9dd138f9d01e1a011a909938ca2d42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7177d4470958645e7b8b4a2fd209c363f466d77d410e3781d4ba5def65d0ce0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:16:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:16:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7177d4470958645e7b8b4a2fd209c363f466d77d410e3781d4ba5def65d0ce0b"}
{"level":"info","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7177d4470958645e7b8b4a2fd209c363f466d77d410e3781d4ba5def65d0ce0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55892b463fa864b69bcb768c8dbd385c5e9dd138f9d01e1a011a909938ca2d42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:16:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:16:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55892b463fa864b69bcb768c8dbd385c5e9dd138f9d01e1a011a909938ca2d42"}
{"level":"info","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55892b463fa864b69bcb768c8dbd385c5e9dd138f9d01e1a011a909938ca2d42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7177d4470958645e7b8b4a2fd209c363f466d77d410e3781d4ba5def65d0ce0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55892b463fa864b69bcb768c8dbd385c5e9dd138f9d01e1a011a909938ca2d42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55892b463fa864b69bcb768c8dbd385c5e9dd138f9d01e1a011a909938ca2d42"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7177d4470958645e7b8b4a2fd209c363f466d77d410e3781d4ba5def65d0ce0b"}
{"level":"info","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55892b463fa864b69bcb768c8dbd385c5e9dd138f9d01e1a011a909938ca2d42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55892b463fa864b69bcb768c8dbd385c5e9dd138f9d01e1a011a909938ca2d42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7177d4470958645e7b8b4a2fd209c363f466d77d410e3781d4ba5def65d0ce0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7177d4470958645e7b8b4a2fd209c363f466d77d410e3781d4ba5def65d0ce0b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55892b463fa864b69bcb768c8dbd385c5e9dd138f9d01e1a011a909938ca2d42"}
{"level":"info","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7177d4470958645e7b8b4a2fd209c363f466d77d410e3781d4ba5def65d0ce0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55892b463fa864b69bcb768c8dbd385c5e9dd138f9d01e1a011a909938ca2d42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:16:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:16:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55892b463fa864b69bcb768c8dbd385c5e9dd138f9d01e1a011a909938ca2d42"}
{"level":"info","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55892b463fa864b69bcb768c8dbd385c5e9dd138f9d01e1a011a909938ca2d42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48a65ea19ff48172b226e6a10331e9dff6d70cc35e2b25e43dd74c739ba3650f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:16:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:16:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48a65ea19ff48172b226e6a10331e9dff6d70cc35e2b25e43dd74c739ba3650f"}
{"level":"info","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48a65ea19ff48172b226e6a10331e9dff6d70cc35e2b25e43dd74c739ba3650f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7177d4470958645e7b8b4a2fd209c363f466d77d410e3781d4ba5def65d0ce0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:16:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:16:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7177d4470958645e7b8b4a2fd209c363f466d77d410e3781d4ba5def65d0ce0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55892b463fa864b69bcb768c8dbd385c5e9dd138f9d01e1a011a909938ca2d42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55892b463fa864b69bcb768c8dbd385c5e9dd138f9d01e1a011a909938ca2d42"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7177d4470958645e7b8b4a2fd209c363f466d77d410e3781d4ba5def65d0ce0b"}
{"level":"info","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55892b463fa864b69bcb768c8dbd385c5e9dd138f9d01e1a011a909938ca2d42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48a65ea19ff48172b226e6a10331e9dff6d70cc35e2b25e43dd74c739ba3650f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48a65ea19ff48172b226e6a10331e9dff6d70cc35e2b25e43dd74c739ba3650f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55892b463fa864b69bcb768c8dbd385c5e9dd138f9d01e1a011a909938ca2d42"}
{"level":"info","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48a65ea19ff48172b226e6a10331e9dff6d70cc35e2b25e43dd74c739ba3650f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7177d4470958645e7b8b4a2fd209c363f466d77d410e3781d4ba5def65d0ce0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7177d4470958645e7b8b4a2fd209c363f466d77d410e3781d4ba5def65d0ce0b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7177d4470958645e7b8b4a2fd209c363f466d77d410e3781d4ba5def65d0ce0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55892b463fa864b69bcb768c8dbd385c5e9dd138f9d01e1a011a909938ca2d42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48a65ea19ff48172b226e6a10331e9dff6d70cc35e2b25e43dd74c739ba3650f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:16:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:16:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48a65ea19ff48172b226e6a10331e9dff6d70cc35e2b25e43dd74c739ba3650f"}
{"level":"info","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48a65ea19ff48172b226e6a10331e9dff6d70cc35e2b25e43dd74c739ba3650f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7177d4470958645e7b8b4a2fd209c363f466d77d410e3781d4ba5def65d0ce0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:16:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:16:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7177d4470958645e7b8b4a2fd209c363f466d77d410e3781d4ba5def65d0ce0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48a65ea19ff48172b226e6a10331e9dff6d70cc35e2b25e43dd74c739ba3650f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48a65ea19ff48172b226e6a10331e9dff6d70cc35e2b25e43dd74c739ba3650f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7177d4470958645e7b8b4a2fd209c363f466d77d410e3781d4ba5def65d0ce0b"}
{"level":"info","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48a65ea19ff48172b226e6a10331e9dff6d70cc35e2b25e43dd74c739ba3650f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7177d4470958645e7b8b4a2fd209c363f466d77d410e3781d4ba5def65d0ce0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7177d4470958645e7b8b4a2fd209c363f466d77d410e3781d4ba5def65d0ce0b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55892b463fa864b69bcb768c8dbd385c5e9dd138f9d01e1a011a909938ca2d42"}
{"level":"info","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7177d4470958645e7b8b4a2fd209c363f466d77d410e3781d4ba5def65d0ce0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48a65ea19ff48172b226e6a10331e9dff6d70cc35e2b25e43dd74c739ba3650f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:16:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:16:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48a65ea19ff48172b226e6a10331e9dff6d70cc35e2b25e43dd74c739ba3650f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7177d4470958645e7b8b4a2fd209c363f466d77d410e3781d4ba5def65d0ce0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48a65ea19ff48172b226e6a10331e9dff6d70cc35e2b25e43dd74c739ba3650f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48a65ea19ff48172b226e6a10331e9dff6d70cc35e2b25e43dd74c739ba3650f"}
{"level":"debug","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48a65ea19ff48172b226e6a10331e9dff6d70cc35e2b25e43dd74c739ba3650f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48a65ea19ff48172b226e6a10331e9dff6d70cc35e2b25e43dd74c739ba3650f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48a65ea19ff48172b226e6a10331e9dff6d70cc35e2b25e43dd74c739ba3650f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48a65ea19ff48172b226e6a10331e9dff6d70cc35e2b25e43dd74c739ba3650f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7177d4470958645e7b8b4a2fd209c363f466d77d410e3781d4ba5def65d0ce0b"}
{"level":"info","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48a65ea19ff48172b226e6a10331e9dff6d70cc35e2b25e43dd74c739ba3650f"}
{"level":"debug","ts":"2026-07-07T16:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a3611a6a83bab853c0e5a5be64f181048715e65d8bb0b72992c20a7b4f930e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:16:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:16:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a3611a6a83bab853c0e5a5be64f181048715e65d8bb0b72992c20a7b4f930e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a3611a6a83bab853c0e5a5be64f181048715e65d8bb0b72992c20a7b4f930e4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a3611a6a83bab853c0e5a5be64f181048715e65d8bb0b72992c20a7b4f930e4"}
{"level":"debug","ts":"2026-07-07T16:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a3611a6a83bab853c0e5a5be64f181048715e65d8bb0b72992c20a7b4f930e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a3611a6a83bab853c0e5a5be64f181048715e65d8bb0b72992c20a7b4f930e4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a3611a6a83bab853c0e5a5be64f181048715e65d8bb0b72992c20a7b4f930e4"}
{"level":"debug","ts":"2026-07-07T16:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a3611a6a83bab853c0e5a5be64f181048715e65d8bb0b72992c20a7b4f930e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:16:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:16:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a3611a6a83bab853c0e5a5be64f181048715e65d8bb0b72992c20a7b4f930e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a3611a6a83bab853c0e5a5be64f181048715e65d8bb0b72992c20a7b4f930e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b2ba7eb701a9c3a1ccda77cf264d45bc4b25926fd302e8e568e4a8d4a1d8bef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:16:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:16:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b2ba7eb701a9c3a1ccda77cf264d45bc4b25926fd302e8e568e4a8d4a1d8bef"}
{"level":"info","ts":"2026-07-07T16:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b2ba7eb701a9c3a1ccda77cf264d45bc4b25926fd302e8e568e4a8d4a1d8bef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a3611a6a83bab853c0e5a5be64f181048715e65d8bb0b72992c20a7b4f930e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:16:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:16:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a3611a6a83bab853c0e5a5be64f181048715e65d8bb0b72992c20a7b4f930e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b2ba7eb701a9c3a1ccda77cf264d45bc4b25926fd302e8e568e4a8d4a1d8bef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:16:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:16:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b2ba7eb701a9c3a1ccda77cf264d45bc4b25926fd302e8e568e4a8d4a1d8bef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a3611a6a83bab853c0e5a5be64f181048715e65d8bb0b72992c20a7b4f930e4"}
{"level":"info","ts":"2026-07-07T16:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b2ba7eb701a9c3a1ccda77cf264d45bc4b25926fd302e8e568e4a8d4a1d8bef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a3611a6a83bab853c0e5a5be64f181048715e65d8bb0b72992c20a7b4f930e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:16:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:16:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a3611a6a83bab853c0e5a5be64f181048715e65d8bb0b72992c20a7b4f930e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b2ba7eb701a9c3a1ccda77cf264d45bc4b25926fd302e8e568e4a8d4a1d8bef"}
{"level":"info","ts":"2026-07-07T16:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a3611a6a83bab853c0e5a5be64f181048715e65d8bb0b72992c20a7b4f930e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b2ba7eb701a9c3a1ccda77cf264d45bc4b25926fd302e8e568e4a8d4a1d8bef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a3611a6a83bab853c0e5a5be64f181048715e65d8bb0b72992c20a7b4f930e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:16:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:16:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a3611a6a83bab853c0e5a5be64f181048715e65d8bb0b72992c20a7b4f930e4"}
{"level":"info","ts":"2026-07-07T16:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a3611a6a83bab853c0e5a5be64f181048715e65d8bb0b72992c20a7b4f930e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a3611a6a83bab853c0e5a5be64f181048715e65d8bb0b72992c20a7b4f930e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:16:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:16:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a3611a6a83bab853c0e5a5be64f181048715e65d8bb0b72992c20a7b4f930e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b2ba7eb701a9c3a1ccda77cf264d45bc4b25926fd302e8e568e4a8d4a1d8bef"}
{"level":"info","ts":"2026-07-07T16:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a3611a6a83bab853c0e5a5be64f181048715e65d8bb0b72992c20a7b4f930e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a3611a6a83bab853c0e5a5be64f181048715e65d8bb0b72992c20a7b4f930e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a3611a6a83bab853c0e5a5be64f181048715e65d8bb0b72992c20a7b4f930e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:16:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:16:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a3611a6a83bab853c0e5a5be64f181048715e65d8bb0b72992c20a7b4f930e4"}
{"level":"info","ts":"2026-07-07T16:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a3611a6a83bab853c0e5a5be64f181048715e65d8bb0b72992c20a7b4f930e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a3611a6a83bab853c0e5a5be64f181048715e65d8bb0b72992c20a7b4f930e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:16:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:16:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T16:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0a3611a6a83bab853c0e5a5be64f181048715e65d8bb0b72992c20a7b4f930e4","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0a3611a6a83bab853c0e5a5be64f181048715e65d8bb0b72992c20a7b4f930e4\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T16:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a3611a6a83bab853c0e5a5be64f181048715e65d8bb0b72992c20a7b4f930e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a3611a6a83bab853c0e5a5be64f181048715e65d8bb0b72992c20a7b4f930e4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a3611a6a83bab853c0e5a5be64f181048715e65d8bb0b72992c20a7b4f930e4"}
{"level":"info","ts":"2026-07-07T16:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a3611a6a83bab853c0e5a5be64f181048715e65d8bb0b72992c20a7b4f930e4"}
{"level":"debug","ts":"2026-07-07T16:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d62d32dbb011d2f7c6b27c2258eecc11171224936b8d6533e787a9c6adb11e8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:16:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:16:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d62d32dbb011d2f7c6b27c2258eecc11171224936b8d6533e787a9c6adb11e8f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d62d32dbb011d2f7c6b27c2258eecc11171224936b8d6533e787a9c6adb11e8f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d62d32dbb011d2f7c6b27c2258eecc11171224936b8d6533e787a9c6adb11e8f"}
{"level":"debug","ts":"2026-07-07T16:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d62d32dbb011d2f7c6b27c2258eecc11171224936b8d6533e787a9c6adb11e8f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a3611a6a83bab853c0e5a5be64f181048715e65d8bb0b72992c20a7b4f930e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:16:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:16:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a3611a6a83bab853c0e5a5be64f181048715e65d8bb0b72992c20a7b4f930e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a3611a6a83bab853c0e5a5be64f181048715e65d8bb0b72992c20a7b4f930e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d62d32dbb011d2f7c6b27c2258eecc11171224936b8d6533e787a9c6adb11e8f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d62d32dbb011d2f7c6b27c2258eecc11171224936b8d6533e787a9c6adb11e8f"}
{"level":"debug","ts":"2026-07-07T16:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a3611a6a83bab853c0e5a5be64f181048715e65d8bb0b72992c20a7b4f930e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:16:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:16:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a3611a6a83bab853c0e5a5be64f181048715e65d8bb0b72992c20a7b4f930e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a3611a6a83bab853c0e5a5be64f181048715e65d8bb0b72992c20a7b4f930e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a3611a6a83bab853c0e5a5be64f181048715e65d8bb0b72992c20a7b4f930e4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a3611a6a83bab853c0e5a5be64f181048715e65d8bb0b72992c20a7b4f930e4"}
{"level":"debug","ts":"2026-07-07T16:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d62d32dbb011d2f7c6b27c2258eecc11171224936b8d6533e787a9c6adb11e8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:16:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:16:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d62d32dbb011d2f7c6b27c2258eecc11171224936b8d6533e787a9c6adb11e8f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a3611a6a83bab853c0e5a5be64f181048715e65d8bb0b72992c20a7b4f930e4"}
{"level":"info","ts":"2026-07-07T16:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d62d32dbb011d2f7c6b27c2258eecc11171224936b8d6533e787a9c6adb11e8f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a3611a6a83bab853c0e5a5be64f181048715e65d8bb0b72992c20a7b4f930e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:16:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:16:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a3611a6a83bab853c0e5a5be64f181048715e65d8bb0b72992c20a7b4f930e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a3611a6a83bab853c0e5a5be64f181048715e65d8bb0b72992c20a7b4f930e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39adbc2bccbd59e1e9e8ba70808ac1b01f32f72c553085a13bc041e74313b25d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:16:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:16:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39adbc2bccbd59e1e9e8ba70808ac1b01f32f72c553085a13bc041e74313b25d"}
{"level":"info","ts":"2026-07-07T16:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39adbc2bccbd59e1e9e8ba70808ac1b01f32f72c553085a13bc041e74313b25d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d62d32dbb011d2f7c6b27c2258eecc11171224936b8d6533e787a9c6adb11e8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:16:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:16:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d62d32dbb011d2f7c6b27c2258eecc11171224936b8d6533e787a9c6adb11e8f"}
{"level":"info","ts":"2026-07-07T16:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b50cecfdd772c4464400be6cf1ef5bf191de479f1122784b33d3fe607c0b4e1e"}
{"level":"info","ts":"2026-07-07T16:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d62d32dbb011d2f7c6b27c2258eecc11171224936b8d6533e787a9c6adb11e8f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b50cecfdd772c4464400be6cf1ef5bf191de479f1122784b33d3fe607c0b4e1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:16:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:16:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b50cecfdd772c4464400be6cf1ef5bf191de479f1122784b33d3fe607c0b4e1e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a3611a6a83bab853c0e5a5be64f181048715e65d8bb0b72992c20a7b4f930e4"}
{"level":"info","ts":"2026-07-07T16:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39adbc2bccbd59e1e9e8ba70808ac1b01f32f72c553085a13bc041e74313b25d"}
{"level":"info","ts":"2026-07-07T16:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b50cecfdd772c4464400be6cf1ef5bf191de479f1122784b33d3fe607c0b4e1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a3611a6a83bab853c0e5a5be64f181048715e65d8bb0b72992c20a7b4f930e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39adbc2bccbd59e1e9e8ba70808ac1b01f32f72c553085a13bc041e74313b25d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:16:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:16:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39adbc2bccbd59e1e9e8ba70808ac1b01f32f72c553085a13bc041e74313b25d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d62d32dbb011d2f7c6b27c2258eecc11171224936b8d6533e787a9c6adb11e8f"}
{"level":"info","ts":"2026-07-07T16:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b50cecfdd772c4464400be6cf1ef5bf191de479f1122784b33d3fe607c0b4e1e"}
{"level":"info","ts":"2026-07-07T16:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39adbc2bccbd59e1e9e8ba70808ac1b01f32f72c553085a13bc041e74313b25d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d62d32dbb011d2f7c6b27c2258eecc11171224936b8d6533e787a9c6adb11e8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:16:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:16:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d62d32dbb011d2f7c6b27c2258eecc11171224936b8d6533e787a9c6adb11e8f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39adbc2bccbd59e1e9e8ba70808ac1b01f32f72c553085a13bc041e74313b25d"}
{"level":"info","ts":"2026-07-07T16:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d62d32dbb011d2f7c6b27c2258eecc11171224936b8d6533e787a9c6adb11e8f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b50cecfdd772c4464400be6cf1ef5bf191de479f1122784b33d3fe607c0b4e1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39adbc2bccbd59e1e9e8ba70808ac1b01f32f72c553085a13bc041e74313b25d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d62d32dbb011d2f7c6b27c2258eecc11171224936b8d6533e787a9c6adb11e8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:16:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:16:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d62d32dbb011d2f7c6b27c2258eecc11171224936b8d6533e787a9c6adb11e8f"}
{"level":"info","ts":"2026-07-07T16:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d62d32dbb011d2f7c6b27c2258eecc11171224936b8d6533e787a9c6adb11e8f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d62d32dbb011d2f7c6b27c2258eecc11171224936b8d6533e787a9c6adb11e8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:16:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:16:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d62d32dbb011d2f7c6b27c2258eecc11171224936b8d6533e787a9c6adb11e8f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d62d32dbb011d2f7c6b27c2258eecc11171224936b8d6533e787a9c6adb11e8f"}
{"level":"info","ts":"2026-07-07T16:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d62d32dbb011d2f7c6b27c2258eecc11171224936b8d6533e787a9c6adb11e8f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d62d32dbb011d2f7c6b27c2258eecc11171224936b8d6533e787a9c6adb11e8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:16:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:16:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d62d32dbb011d2f7c6b27c2258eecc11171224936b8d6533e787a9c6adb11e8f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d62d32dbb011d2f7c6b27c2258eecc11171224936b8d6533e787a9c6adb11e8f"}
{"level":"error","ts":"2026-07-07T16:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d62d32dbb011d2f7c6b27c2258eecc11171224936b8d6533e787a9c6adb11e8f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d62d32dbb011d2f7c6b27c2258eecc11171224936b8d6533e787a9c6adb11e8f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T16:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d62d32dbb011d2f7c6b27c2258eecc11171224936b8d6533e787a9c6adb11e8f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d62d32dbb011d2f7c6b27c2258eecc11171224936b8d6533e787a9c6adb11e8f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebfd599fa1662cb625ae2237b8a3406394f88dff773f8fc73e5702e5764a20fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:16:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:16:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebfd599fa1662cb625ae2237b8a3406394f88dff773f8fc73e5702e5764a20fb"}
{"level":"info","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebfd599fa1662cb625ae2237b8a3406394f88dff773f8fc73e5702e5764a20fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebfd599fa1662cb625ae2237b8a3406394f88dff773f8fc73e5702e5764a20fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebfd599fa1662cb625ae2237b8a3406394f88dff773f8fc73e5702e5764a20fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebfd599fa1662cb625ae2237b8a3406394f88dff773f8fc73e5702e5764a20fb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebfd599fa1662cb625ae2237b8a3406394f88dff773f8fc73e5702e5764a20fb"}
{"level":"debug","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebfd599fa1662cb625ae2237b8a3406394f88dff773f8fc73e5702e5764a20fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:16:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:16:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ebfd599fa1662cb625ae2237b8a3406394f88dff773f8fc73e5702e5764a20fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebfd599fa1662cb625ae2237b8a3406394f88dff773f8fc73e5702e5764a20fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebfd599fa1662cb625ae2237b8a3406394f88dff773f8fc73e5702e5764a20fb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebfd599fa1662cb625ae2237b8a3406394f88dff773f8fc73e5702e5764a20fb"}
{"level":"debug","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5014d56d3525cff0595628bd3fb0cf6f6abb5e601f4e61f3913fd161975872d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:16:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:16:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5014d56d3525cff0595628bd3fb0cf6f6abb5e601f4e61f3913fd161975872d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5014d56d3525cff0595628bd3fb0cf6f6abb5e601f4e61f3913fd161975872d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5014d56d3525cff0595628bd3fb0cf6f6abb5e601f4e61f3913fd161975872d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5014d56d3525cff0595628bd3fb0cf6f6abb5e601f4e61f3913fd161975872d"}
{"level":"debug","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5014d56d3525cff0595628bd3fb0cf6f6abb5e601f4e61f3913fd161975872d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5014d56d3525cff0595628bd3fb0cf6f6abb5e601f4e61f3913fd161975872d"}
{"level":"debug","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5014d56d3525cff0595628bd3fb0cf6f6abb5e601f4e61f3913fd161975872d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:16:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:16:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5014d56d3525cff0595628bd3fb0cf6f6abb5e601f4e61f3913fd161975872d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5014d56d3525cff0595628bd3fb0cf6f6abb5e601f4e61f3913fd161975872d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d7487a9ce210f7ec61276a72c8c78a9d726cfc1d9b1065b1c7d11af4a3bb19c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:16:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:16:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d7487a9ce210f7ec61276a72c8c78a9d726cfc1d9b1065b1c7d11af4a3bb19c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5014d56d3525cff0595628bd3fb0cf6f6abb5e601f4e61f3913fd161975872d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d7487a9ce210f7ec61276a72c8c78a9d726cfc1d9b1065b1c7d11af4a3bb19c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d7487a9ce210f7ec61276a72c8c78a9d726cfc1d9b1065b1c7d11af4a3bb19c"}
{"level":"debug","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d7487a9ce210f7ec61276a72c8c78a9d726cfc1d9b1065b1c7d11af4a3bb19c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:16:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:16:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d7487a9ce210f7ec61276a72c8c78a9d726cfc1d9b1065b1c7d11af4a3bb19c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d7487a9ce210f7ec61276a72c8c78a9d726cfc1d9b1065b1c7d11af4a3bb19c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d7487a9ce210f7ec61276a72c8c78a9d726cfc1d9b1065b1c7d11af4a3bb19c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5014d56d3525cff0595628bd3fb0cf6f6abb5e601f4e61f3913fd161975872d"}
{"level":"info","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d7487a9ce210f7ec61276a72c8c78a9d726cfc1d9b1065b1c7d11af4a3bb19c"}
{"level":"debug","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eac94c2666d26daf19cfea6bd6d3451118f5feb2893f944596cfa6c08596ec09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:16:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:16:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eac94c2666d26daf19cfea6bd6d3451118f5feb2893f944596cfa6c08596ec09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eac94c2666d26daf19cfea6bd6d3451118f5feb2893f944596cfa6c08596ec09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:16:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:16:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eac94c2666d26daf19cfea6bd6d3451118f5feb2893f944596cfa6c08596ec09"}
{"level":"info","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eac94c2666d26daf19cfea6bd6d3451118f5feb2893f944596cfa6c08596ec09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eac94c2666d26daf19cfea6bd6d3451118f5feb2893f944596cfa6c08596ec09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:16:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:16:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"eac94c2666d26daf19cfea6bd6d3451118f5feb2893f944596cfa6c08596ec09","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"eac94c2666d26daf19cfea6bd6d3451118f5feb2893f944596cfa6c08596ec09\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eac94c2666d26daf19cfea6bd6d3451118f5feb2893f944596cfa6c08596ec09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eac94c2666d26daf19cfea6bd6d3451118f5feb2893f944596cfa6c08596ec09","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eac94c2666d26daf19cfea6bd6d3451118f5feb2893f944596cfa6c08596ec09"}
{"level":"info","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eac94c2666d26daf19cfea6bd6d3451118f5feb2893f944596cfa6c08596ec09"}
{"level":"debug","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb8a78fb7bf56eb5bcf280a1ddce0f2911c21c6765932e6a70b6010780d3ae8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:16:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:16:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb8a78fb7bf56eb5bcf280a1ddce0f2911c21c6765932e6a70b6010780d3ae8e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb8a78fb7bf56eb5bcf280a1ddce0f2911c21c6765932e6a70b6010780d3ae8e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb8a78fb7bf56eb5bcf280a1ddce0f2911c21c6765932e6a70b6010780d3ae8e"}
{"level":"debug","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb8a78fb7bf56eb5bcf280a1ddce0f2911c21c6765932e6a70b6010780d3ae8e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eac94c2666d26daf19cfea6bd6d3451118f5feb2893f944596cfa6c08596ec09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:16:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:16:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eac94c2666d26daf19cfea6bd6d3451118f5feb2893f944596cfa6c08596ec09"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eac94c2666d26daf19cfea6bd6d3451118f5feb2893f944596cfa6c08596ec09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eac94c2666d26daf19cfea6bd6d3451118f5feb2893f944596cfa6c08596ec09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb8a78fb7bf56eb5bcf280a1ddce0f2911c21c6765932e6a70b6010780d3ae8e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb8a78fb7bf56eb5bcf280a1ddce0f2911c21c6765932e6a70b6010780d3ae8e"}
{"level":"info","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eac94c2666d26daf19cfea6bd6d3451118f5feb2893f944596cfa6c08596ec09"}
{"level":"debug","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb8a78fb7bf56eb5bcf280a1ddce0f2911c21c6765932e6a70b6010780d3ae8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:16:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:16:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb8a78fb7bf56eb5bcf280a1ddce0f2911c21c6765932e6a70b6010780d3ae8e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb8a78fb7bf56eb5bcf280a1ddce0f2911c21c6765932e6a70b6010780d3ae8e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb8a78fb7bf56eb5bcf280a1ddce0f2911c21c6765932e6a70b6010780d3ae8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:16:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:16:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb8a78fb7bf56eb5bcf280a1ddce0f2911c21c6765932e6a70b6010780d3ae8e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caec15949f9ff016c1108ed92e7be205170a4d8ac965756aef0fbb2c0b94865e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:16:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:16:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb8a78fb7bf56eb5bcf280a1ddce0f2911c21c6765932e6a70b6010780d3ae8e"}
{"level":"info","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caec15949f9ff016c1108ed92e7be205170a4d8ac965756aef0fbb2c0b94865e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb8a78fb7bf56eb5bcf280a1ddce0f2911c21c6765932e6a70b6010780d3ae8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:16:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:16:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb8a78fb7bf56eb5bcf280a1ddce0f2911c21c6765932e6a70b6010780d3ae8e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caec15949f9ff016c1108ed92e7be205170a4d8ac965756aef0fbb2c0b94865e"}
{"level":"info","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb8a78fb7bf56eb5bcf280a1ddce0f2911c21c6765932e6a70b6010780d3ae8e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caec15949f9ff016c1108ed92e7be205170a4d8ac965756aef0fbb2c0b94865e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:16:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:16:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["caec15949f9ff016c1108ed92e7be205170a4d8ac965756aef0fbb2c0b94865e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb8a78fb7bf56eb5bcf280a1ddce0f2911c21c6765932e6a70b6010780d3ae8e"}
{"level":"info","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caec15949f9ff016c1108ed92e7be205170a4d8ac965756aef0fbb2c0b94865e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb8a78fb7bf56eb5bcf280a1ddce0f2911c21c6765932e6a70b6010780d3ae8e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caec15949f9ff016c1108ed92e7be205170a4d8ac965756aef0fbb2c0b94865e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:16:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:16:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caec15949f9ff016c1108ed92e7be205170a4d8ac965756aef0fbb2c0b94865e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"caec15949f9ff016c1108ed92e7be205170a4d8ac965756aef0fbb2c0b94865e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caec15949f9ff016c1108ed92e7be205170a4d8ac965756aef0fbb2c0b94865e"}
{"level":"debug","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caec15949f9ff016c1108ed92e7be205170a4d8ac965756aef0fbb2c0b94865e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:16:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:16:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["caec15949f9ff016c1108ed92e7be205170a4d8ac965756aef0fbb2c0b94865e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caec15949f9ff016c1108ed92e7be205170a4d8ac965756aef0fbb2c0b94865e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09c8cdaaa4f641ea316d8ac243fb470b43efb0ee5b7aec8ce66080734a4aee22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:16:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:16:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb8a78fb7bf56eb5bcf280a1ddce0f2911c21c6765932e6a70b6010780d3ae8e"}
{"level":"info","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09c8cdaaa4f641ea316d8ac243fb470b43efb0ee5b7aec8ce66080734a4aee22","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caec15949f9ff016c1108ed92e7be205170a4d8ac965756aef0fbb2c0b94865e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:16:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:16:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caec15949f9ff016c1108ed92e7be205170a4d8ac965756aef0fbb2c0b94865e"}
{"level":"info","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caec15949f9ff016c1108ed92e7be205170a4d8ac965756aef0fbb2c0b94865e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09c8cdaaa4f641ea316d8ac243fb470b43efb0ee5b7aec8ce66080734a4aee22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:16:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:16:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09c8cdaaa4f641ea316d8ac243fb470b43efb0ee5b7aec8ce66080734a4aee22","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caec15949f9ff016c1108ed92e7be205170a4d8ac965756aef0fbb2c0b94865e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:16:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:16:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["caec15949f9ff016c1108ed92e7be205170a4d8ac965756aef0fbb2c0b94865e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09c8cdaaa4f641ea316d8ac243fb470b43efb0ee5b7aec8ce66080734a4aee22"}
{"level":"info","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caec15949f9ff016c1108ed92e7be205170a4d8ac965756aef0fbb2c0b94865e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09c8cdaaa4f641ea316d8ac243fb470b43efb0ee5b7aec8ce66080734a4aee22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:16:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:16:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["09c8cdaaa4f641ea316d8ac243fb470b43efb0ee5b7aec8ce66080734a4aee22"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caec15949f9ff016c1108ed92e7be205170a4d8ac965756aef0fbb2c0b94865e"}
{"level":"info","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09c8cdaaa4f641ea316d8ac243fb470b43efb0ee5b7aec8ce66080734a4aee22","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"caec15949f9ff016c1108ed92e7be205170a4d8ac965756aef0fbb2c0b94865e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09c8cdaaa4f641ea316d8ac243fb470b43efb0ee5b7aec8ce66080734a4aee22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:16:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:16:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09c8cdaaa4f641ea316d8ac243fb470b43efb0ee5b7aec8ce66080734a4aee22"}
{"level":"info","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09c8cdaaa4f641ea316d8ac243fb470b43efb0ee5b7aec8ce66080734a4aee22","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f70378f148d8d364872bbe5186515a59efdc5bed0d87c5141a6e4eb1c2dca36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:16:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:16:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f70378f148d8d364872bbe5186515a59efdc5bed0d87c5141a6e4eb1c2dca36","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09c8cdaaa4f641ea316d8ac243fb470b43efb0ee5b7aec8ce66080734a4aee22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:16:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:16:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["09c8cdaaa4f641ea316d8ac243fb470b43efb0ee5b7aec8ce66080734a4aee22"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caec15949f9ff016c1108ed92e7be205170a4d8ac965756aef0fbb2c0b94865e"}
{"level":"info","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09c8cdaaa4f641ea316d8ac243fb470b43efb0ee5b7aec8ce66080734a4aee22","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b057fea29aab48a542ba72fba8a30a8759e13a0914bbb6f617f01f703c5fda83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:16:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:16:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f70378f148d8d364872bbe5186515a59efdc5bed0d87c5141a6e4eb1c2dca36"}
{"level":"info","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b057fea29aab48a542ba72fba8a30a8759e13a0914bbb6f617f01f703c5fda83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f70378f148d8d364872bbe5186515a59efdc5bed0d87c5141a6e4eb1c2dca36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:16:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:16:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f70378f148d8d364872bbe5186515a59efdc5bed0d87c5141a6e4eb1c2dca36"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f70378f148d8d364872bbe5186515a59efdc5bed0d87c5141a6e4eb1c2dca36","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09c8cdaaa4f641ea316d8ac243fb470b43efb0ee5b7aec8ce66080734a4aee22"}
{"level":"debug","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09c8cdaaa4f641ea316d8ac243fb470b43efb0ee5b7aec8ce66080734a4aee22","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b057fea29aab48a542ba72fba8a30a8759e13a0914bbb6f617f01f703c5fda83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:16:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:16:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b057fea29aab48a542ba72fba8a30a8759e13a0914bbb6f617f01f703c5fda83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f70378f148d8d364872bbe5186515a59efdc5bed0d87c5141a6e4eb1c2dca36","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b057fea29aab48a542ba72fba8a30a8759e13a0914bbb6f617f01f703c5fda83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa9439c19319bc358b5861271ae9c5b13b5f6184ba86588d5cee5303919011c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:16:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:16:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b057fea29aab48a542ba72fba8a30a8759e13a0914bbb6f617f01f703c5fda83"}
{"level":"info","ts":"2026-07-07T16:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa9439c19319bc358b5861271ae9c5b13b5f6184ba86588d5cee5303919011c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b057fea29aab48a542ba72fba8a30a8759e13a0914bbb6f617f01f703c5fda83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:16:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:16:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b057fea29aab48a542ba72fba8a30a8759e13a0914bbb6f617f01f703c5fda83"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f70378f148d8d364872bbe5186515a59efdc5bed0d87c5141a6e4eb1c2dca36"}
{"level":"info","ts":"2026-07-07T16:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b057fea29aab48a542ba72fba8a30a8759e13a0914bbb6f617f01f703c5fda83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa9439c19319bc358b5861271ae9c5b13b5f6184ba86588d5cee5303919011c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:16:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:16:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa9439c19319bc358b5861271ae9c5b13b5f6184ba86588d5cee5303919011c7"}
{"level":"info","ts":"2026-07-07T16:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa9439c19319bc358b5861271ae9c5b13b5f6184ba86588d5cee5303919011c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b057fea29aab48a542ba72fba8a30a8759e13a0914bbb6f617f01f703c5fda83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:16:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:16:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b057fea29aab48a542ba72fba8a30a8759e13a0914bbb6f617f01f703c5fda83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa9439c19319bc358b5861271ae9c5b13b5f6184ba86588d5cee5303919011c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:16:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:16:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa9439c19319bc358b5861271ae9c5b13b5f6184ba86588d5cee5303919011c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b057fea29aab48a542ba72fba8a30a8759e13a0914bbb6f617f01f703c5fda83"}
{"level":"info","ts":"2026-07-07T16:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa9439c19319bc358b5861271ae9c5b13b5f6184ba86588d5cee5303919011c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b057fea29aab48a542ba72fba8a30a8759e13a0914bbb6f617f01f703c5fda83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:16:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:16:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b057fea29aab48a542ba72fba8a30a8759e13a0914bbb6f617f01f703c5fda83"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa9439c19319bc358b5861271ae9c5b13b5f6184ba86588d5cee5303919011c7"}
{"level":"info","ts":"2026-07-07T16:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b057fea29aab48a542ba72fba8a30a8759e13a0914bbb6f617f01f703c5fda83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa9439c19319bc358b5861271ae9c5b13b5f6184ba86588d5cee5303919011c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b057fea29aab48a542ba72fba8a30a8759e13a0914bbb6f617f01f703c5fda83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:16:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:16:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b057fea29aab48a542ba72fba8a30a8759e13a0914bbb6f617f01f703c5fda83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b057fea29aab48a542ba72fba8a30a8759e13a0914bbb6f617f01f703c5fda83","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b057fea29aab48a542ba72fba8a30a8759e13a0914bbb6f617f01f703c5fda83"}
{"level":"debug","ts":"2026-07-07T16:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b057fea29aab48a542ba72fba8a30a8759e13a0914bbb6f617f01f703c5fda83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:16:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:16:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b057fea29aab48a542ba72fba8a30a8759e13a0914bbb6f617f01f703c5fda83"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b057fea29aab48a542ba72fba8a30a8759e13a0914bbb6f617f01f703c5fda83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b057fea29aab48a542ba72fba8a30a8759e13a0914bbb6f617f01f703c5fda83","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa9439c19319bc358b5861271ae9c5b13b5f6184ba86588d5cee5303919011c7"}
{"level":"info","ts":"2026-07-07T16:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b057fea29aab48a542ba72fba8a30a8759e13a0914bbb6f617f01f703c5fda83"}
{"level":"info","ts":"2026-07-07T16:16:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fae91407-6abc-4ef1-be97-23b6b8fd58d8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:36962","PortSpecifier":{"PortValue":36962}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fae91407-6abc-4ef1-be97-23b6b8fd58d8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-9ac19f.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:16:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fae91407-6abc-4ef1-be97-23b6b8fd58d8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:36962","PortSpecifier":{"PortValue":36962}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783441010,"nanos":195291361},"http":{"id":"fae91407-6abc-4ef1-be97-23b6b8fd58d8","method":"POST","headers":{":authority":"e2e-shared-a-9ac19f.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:16:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fae91407-6abc-4ef1-be97-23b6b8fd58d8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T16:16:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fae91407-6abc-4ef1-be97-23b6b8fd58d8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f6a73c6c-303e-47e7-8a1a-2f23fec1b49d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2222897e-adbc-4372-aada-e7cf61fcb2a7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/13545484d307"]}}
{"level":"debug","ts":"2026-07-07T16:16:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fae91407-6abc-4ef1-be97-23b6b8fd58d8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/13545484d307"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2222897e-adbc-4372-aada-e7cf61fcb2a7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f6a73c6c-303e-47e7-8a1a-2f23fec1b49d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d62d32dbb011d2f7c6b27c2258eecc11171224936b8d6533e787a9c6adb11e8f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-9ac19f.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:16:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fae91407-6abc-4ef1-be97-23b6b8fd58d8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:16:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fae91407-6abc-4ef1-be97-23b6b8fd58d8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:16:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fae91407-6abc-4ef1-be97-23b6b8fd58d8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9ac19f/auth-test-model-9ac19f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:16:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fae91407-6abc-4ef1-be97-23b6b8fd58d8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T16:16:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fae91407-6abc-4ef1-be97-23b6b8fd58d8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:16:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fae91407-6abc-4ef1-be97-23b6b8fd58d8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T16:16:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fae91407-6abc-4ef1-be97-23b6b8fd58d8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:16:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fae91407-6abc-4ef1-be97-23b6b8fd58d8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:16:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"feb93929-8b38-4a1a-a8ec-1624f2aeb78d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:32858","PortSpecifier":{"PortValue":32858}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"feb93929-8b38-4a1a-a8ec-1624f2aeb78d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-132358.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:16:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"feb93929-8b38-4a1a-a8ec-1624f2aeb78d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:32858","PortSpecifier":{"PortValue":32858}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783441010,"nanos":266084396},"http":{"id":"feb93929-8b38-4a1a-a8ec-1624f2aeb78d","method":"POST","headers":{":authority":"e2e-shared-b-132358.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:16:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"feb93929-8b38-4a1a-a8ec-1624f2aeb78d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T16:16:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"feb93929-8b38-4a1a-a8ec-1624f2aeb78d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f6a73c6c-303e-47e7-8a1a-2f23fec1b49d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2222897e-adbc-4372-aada-e7cf61fcb2a7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/13545484d307"]}}
{"level":"debug","ts":"2026-07-07T16:16:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"feb93929-8b38-4a1a-a8ec-1624f2aeb78d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/13545484d307"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2222897e-adbc-4372-aada-e7cf61fcb2a7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f6a73c6c-303e-47e7-8a1a-2f23fec1b49d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b057fea29aab48a542ba72fba8a30a8759e13a0914bbb6f617f01f703c5fda83"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-132358.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:16:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"feb93929-8b38-4a1a-a8ec-1624f2aeb78d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:16:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"feb93929-8b38-4a1a-a8ec-1624f2aeb78d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:16:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"feb93929-8b38-4a1a-a8ec-1624f2aeb78d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-132358/auth-test-model-132358\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:16:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"feb93929-8b38-4a1a-a8ec-1624f2aeb78d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T16:16:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"feb93929-8b38-4a1a-a8ec-1624f2aeb78d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:16:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"feb93929-8b38-4a1a-a8ec-1624f2aeb78d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T16:16:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"feb93929-8b38-4a1a-a8ec-1624f2aeb78d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:16:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"feb93929-8b38-4a1a-a8ec-1624f2aeb78d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:16:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a0773ead-4917-4c7c-9bd9-92c73826e20a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:36978","PortSpecifier":{"PortValue":36978}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a0773ead-4917-4c7c-9bd9-92c73826e20a","method":"GET","path":"/maas-api/v1/api-keys/e8304d41-ea14-437e-9b62-1881de4f6911","host":"e2e-shared-a-9ac19f.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:16:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a0773ead-4917-4c7c-9bd9-92c73826e20a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:36978","PortSpecifier":{"PortValue":36978}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783441010,"nanos":341718146},"http":{"id":"a0773ead-4917-4c7c-9bd9-92c73826e20a","method":"GET","headers":{":authority":"e2e-shared-a-9ac19f.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/e8304d41-ea14-437e-9b62-1881de4f6911",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:16:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a0773ead-4917-4c7c-9bd9-92c73826e20a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T16:16:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a0773ead-4917-4c7c-9bd9-92c73826e20a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f6a73c6c-303e-47e7-8a1a-2f23fec1b49d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2222897e-adbc-4372-aada-e7cf61fcb2a7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/13545484d307"]}}
{"level":"debug","ts":"2026-07-07T16:16:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a0773ead-4917-4c7c-9bd9-92c73826e20a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/13545484d307"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2222897e-adbc-4372-aada-e7cf61fcb2a7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f6a73c6c-303e-47e7-8a1a-2f23fec1b49d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d62d32dbb011d2f7c6b27c2258eecc11171224936b8d6533e787a9c6adb11e8f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-9ac19f.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/e8304d41-ea14-437e-9b62-1881de4f6911",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:16:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a0773ead-4917-4c7c-9bd9-92c73826e20a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:16:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a0773ead-4917-4c7c-9bd9-92c73826e20a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:16:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a0773ead-4917-4c7c-9bd9-92c73826e20a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9ac19f/auth-test-model-9ac19f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:16:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a0773ead-4917-4c7c-9bd9-92c73826e20a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T16:16:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a0773ead-4917-4c7c-9bd9-92c73826e20a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:16:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a0773ead-4917-4c7c-9bd9-92c73826e20a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T16:16:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a0773ead-4917-4c7c-9bd9-92c73826e20a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:16:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a0773ead-4917-4c7c-9bd9-92c73826e20a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:16:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"58592ae2-96fe-4802-afc2-defe205ca8c6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:32872","PortSpecifier":{"PortValue":32872}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"58592ae2-96fe-4802-afc2-defe205ca8c6","method":"GET","path":"/maas-api/v1/api-keys/382095dc-cfa7-4039-80a1-0861aaa3acca","host":"e2e-shared-b-132358.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:16:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"58592ae2-96fe-4802-afc2-defe205ca8c6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:32872","PortSpecifier":{"PortValue":32872}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783441010,"nanos":383099451},"http":{"id":"58592ae2-96fe-4802-afc2-defe205ca8c6","method":"GET","headers":{":authority":"e2e-shared-b-132358.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/382095dc-cfa7-4039-80a1-0861aaa3acca",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:16:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"58592ae2-96fe-4802-afc2-defe205ca8c6","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T16:16:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"58592ae2-96fe-4802-afc2-defe205ca8c6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f6a73c6c-303e-47e7-8a1a-2f23fec1b49d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2222897e-adbc-4372-aada-e7cf61fcb2a7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/13545484d307"]}}
{"level":"debug","ts":"2026-07-07T16:16:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"58592ae2-96fe-4802-afc2-defe205ca8c6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/13545484d307"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2222897e-adbc-4372-aada-e7cf61fcb2a7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f6a73c6c-303e-47e7-8a1a-2f23fec1b49d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b057fea29aab48a542ba72fba8a30a8759e13a0914bbb6f617f01f703c5fda83"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-132358.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/382095dc-cfa7-4039-80a1-0861aaa3acca",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:16:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"58592ae2-96fe-4802-afc2-defe205ca8c6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:16:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"58592ae2-96fe-4802-afc2-defe205ca8c6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:16:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"58592ae2-96fe-4802-afc2-defe205ca8c6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-132358/auth-test-model-132358\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:16:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"58592ae2-96fe-4802-afc2-defe205ca8c6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T16:16:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"58592ae2-96fe-4802-afc2-defe205ca8c6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:16:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"58592ae2-96fe-4802-afc2-defe205ca8c6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T16:16:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"58592ae2-96fe-4802-afc2-defe205ca8c6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:16:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"58592ae2-96fe-4802-afc2-defe205ca8c6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:17:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c2d0fee8-819f-4aa9-af13-d65f9e14e8f3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:52272","PortSpecifier":{"PortValue":52272}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c2d0fee8-819f-4aa9-af13-d65f9e14e8f3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-9ac19f.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:17:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c2d0fee8-819f-4aa9-af13-d65f9e14e8f3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:52272","PortSpecifier":{"PortValue":52272}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783441034,"nanos":840940220},"http":{"id":"c2d0fee8-819f-4aa9-af13-d65f9e14e8f3","method":"POST","headers":{":authority":"e2e-shared-a-9ac19f.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:17:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c2d0fee8-819f-4aa9-af13-d65f9e14e8f3","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T16:17:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c2d0fee8-819f-4aa9-af13-d65f9e14e8f3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f6a73c6c-303e-47e7-8a1a-2f23fec1b49d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2222897e-adbc-4372-aada-e7cf61fcb2a7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/13545484d307"]}}
{"level":"debug","ts":"2026-07-07T16:17:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c2d0fee8-819f-4aa9-af13-d65f9e14e8f3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/13545484d307"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2222897e-adbc-4372-aada-e7cf61fcb2a7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f6a73c6c-303e-47e7-8a1a-2f23fec1b49d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d62d32dbb011d2f7c6b27c2258eecc11171224936b8d6533e787a9c6adb11e8f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-9ac19f.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:17:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c2d0fee8-819f-4aa9-af13-d65f9e14e8f3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:17:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c2d0fee8-819f-4aa9-af13-d65f9e14e8f3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:17:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c2d0fee8-819f-4aa9-af13-d65f9e14e8f3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9ac19f/auth-test-model-9ac19f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:17:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c2d0fee8-819f-4aa9-af13-d65f9e14e8f3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T16:17:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c2d0fee8-819f-4aa9-af13-d65f9e14e8f3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:17:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c2d0fee8-819f-4aa9-af13-d65f9e14e8f3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T16:17:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c2d0fee8-819f-4aa9-af13-d65f9e14e8f3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:17:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c2d0fee8-819f-4aa9-af13-d65f9e14e8f3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:17:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6b1819db-6644-4755-b422-5f393e063230","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:45770","PortSpecifier":{"PortValue":45770}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6b1819db-6644-4755-b422-5f393e063230","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-132358.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:17:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6b1819db-6644-4755-b422-5f393e063230","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:45770","PortSpecifier":{"PortValue":45770}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783441034,"nanos":884448596},"http":{"id":"6b1819db-6644-4755-b422-5f393e063230","method":"POST","headers":{":authority":"e2e-shared-b-132358.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:17:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6b1819db-6644-4755-b422-5f393e063230","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T16:17:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6b1819db-6644-4755-b422-5f393e063230","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f6a73c6c-303e-47e7-8a1a-2f23fec1b49d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2222897e-adbc-4372-aada-e7cf61fcb2a7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/13545484d307"]}}
{"level":"debug","ts":"2026-07-07T16:17:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6b1819db-6644-4755-b422-5f393e063230","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/13545484d307"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2222897e-adbc-4372-aada-e7cf61fcb2a7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f6a73c6c-303e-47e7-8a1a-2f23fec1b49d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b057fea29aab48a542ba72fba8a30a8759e13a0914bbb6f617f01f703c5fda83"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-132358.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:17:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b1819db-6644-4755-b422-5f393e063230","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:17:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b1819db-6644-4755-b422-5f393e063230","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:17:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b1819db-6644-4755-b422-5f393e063230","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-132358/auth-test-model-132358\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:17:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6b1819db-6644-4755-b422-5f393e063230","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T16:17:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b1819db-6644-4755-b422-5f393e063230","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:17:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b1819db-6644-4755-b422-5f393e063230","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T16:17:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6b1819db-6644-4755-b422-5f393e063230","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:17:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6b1819db-6644-4755-b422-5f393e063230","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:17:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"61f32573-1f14-4ba0-b2b9-05c90c58a15a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:52282","PortSpecifier":{"PortValue":52282}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"61f32573-1f14-4ba0-b2b9-05c90c58a15a","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-9ac19f.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:17:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"61f32573-1f14-4ba0-b2b9-05c90c58a15a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:52282","PortSpecifier":{"PortValue":52282}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783441034,"nanos":924668475},"http":{"id":"61f32573-1f14-4ba0-b2b9-05c90c58a15a","method":"GET","headers":{":authority":"e2e-shared-a-9ac19f.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:17:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"61f32573-1f14-4ba0-b2b9-05c90c58a15a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-CdR34UPqF03TVZHi_dBt4lm2nBHsq1mWciVHJ1XueX4iGXXJsQxw7KyER2VD"}
{"level":"debug","ts":"2026-07-07T16:17:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"61f32573-1f14-4ba0-b2b9-05c90c58a15a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9ac19f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-CdR34UPqF03TVZHi_dBt4lm2nBHsq1mWciVHJ1XueX4iGXXJsQxw7KyER2VD\"}"}
{"level":"debug","ts":"2026-07-07T16:17:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"61f32573-1f14-4ba0-b2b9-05c90c58a15a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9ac19f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"838d0cd6-bbaa-48bf-a603-e9d27cd54728","keyName":"e2e-auth-iso-a-509847","subscription":"e2e-auth-iso-dab039","tenant":"e2e-shared-a-9ac19f","userId":"838d0cd6-bbaa-48bf-a603-e9d27cd54728","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T16:17:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"61f32573-1f14-4ba0-b2b9-05c90c58a15a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:17:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"61f32573-1f14-4ba0-b2b9-05c90c58a15a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:17:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"61f32573-1f14-4ba0-b2b9-05c90c58a15a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:17:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"61f32573-1f14-4ba0-b2b9-05c90c58a15a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9ac19f/auth-test-model-9ac19f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:17:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"61f32573-1f14-4ba0-b2b9-05c90c58a15a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:17:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"61f32573-1f14-4ba0-b2b9-05c90c58a15a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-07T16:17:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"61f32573-1f14-4ba0-b2b9-05c90c58a15a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T16:17:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"61f32573-1f14-4ba0-b2b9-05c90c58a15a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-dab039"}
{"level":"info","ts":"2026-07-07T16:17:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"61f32573-1f14-4ba0-b2b9-05c90c58a15a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:17:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"61f32573-1f14-4ba0-b2b9-05c90c58a15a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:17:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d28462db-2e79-4b44-b90e-2361329f9dfb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:51118","PortSpecifier":{"PortValue":51118}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d28462db-2e79-4b44-b90e-2361329f9dfb","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-9ac19f.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:17:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d28462db-2e79-4b44-b90e-2361329f9dfb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:51118","PortSpecifier":{"PortValue":51118}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783441050,"nanos":53155035},"http":{"id":"d28462db-2e79-4b44-b90e-2361329f9dfb","method":"POST","headers":{":authority":"e2e-shared-a-9ac19f.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:17:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d28462db-2e79-4b44-b90e-2361329f9dfb","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T16:17:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d28462db-2e79-4b44-b90e-2361329f9dfb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f6a73c6c-303e-47e7-8a1a-2f23fec1b49d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2222897e-adbc-4372-aada-e7cf61fcb2a7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/13545484d307"]}}
{"level":"debug","ts":"2026-07-07T16:17:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d28462db-2e79-4b44-b90e-2361329f9dfb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/13545484d307"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2222897e-adbc-4372-aada-e7cf61fcb2a7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f6a73c6c-303e-47e7-8a1a-2f23fec1b49d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d62d32dbb011d2f7c6b27c2258eecc11171224936b8d6533e787a9c6adb11e8f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-9ac19f.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:17:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d28462db-2e79-4b44-b90e-2361329f9dfb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:17:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d28462db-2e79-4b44-b90e-2361329f9dfb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:17:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d28462db-2e79-4b44-b90e-2361329f9dfb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9ac19f/auth-test-model-9ac19f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:17:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d28462db-2e79-4b44-b90e-2361329f9dfb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T16:17:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d28462db-2e79-4b44-b90e-2361329f9dfb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:17:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d28462db-2e79-4b44-b90e-2361329f9dfb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T16:17:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d28462db-2e79-4b44-b90e-2361329f9dfb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:17:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d28462db-2e79-4b44-b90e-2361329f9dfb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:17:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6d30f11f-1c77-4bbb-82ba-c4a050ef453a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:56644","PortSpecifier":{"PortValue":56644}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6d30f11f-1c77-4bbb-82ba-c4a050ef453a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-132358.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:17:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6d30f11f-1c77-4bbb-82ba-c4a050ef453a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:56644","PortSpecifier":{"PortValue":56644}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783441050,"nanos":91245502},"http":{"id":"6d30f11f-1c77-4bbb-82ba-c4a050ef453a","method":"POST","headers":{":authority":"e2e-shared-b-132358.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:17:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6d30f11f-1c77-4bbb-82ba-c4a050ef453a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T16:17:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6d30f11f-1c77-4bbb-82ba-c4a050ef453a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f6a73c6c-303e-47e7-8a1a-2f23fec1b49d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2222897e-adbc-4372-aada-e7cf61fcb2a7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/13545484d307"]}}
{"level":"debug","ts":"2026-07-07T16:17:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6d30f11f-1c77-4bbb-82ba-c4a050ef453a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/13545484d307"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2222897e-adbc-4372-aada-e7cf61fcb2a7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f6a73c6c-303e-47e7-8a1a-2f23fec1b49d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b057fea29aab48a542ba72fba8a30a8759e13a0914bbb6f617f01f703c5fda83"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-132358.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:17:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6d30f11f-1c77-4bbb-82ba-c4a050ef453a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:17:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6d30f11f-1c77-4bbb-82ba-c4a050ef453a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:17:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6d30f11f-1c77-4bbb-82ba-c4a050ef453a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-132358/auth-test-model-132358\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:17:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6d30f11f-1c77-4bbb-82ba-c4a050ef453a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T16:17:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6d30f11f-1c77-4bbb-82ba-c4a050ef453a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:17:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6d30f11f-1c77-4bbb-82ba-c4a050ef453a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T16:17:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6d30f11f-1c77-4bbb-82ba-c4a050ef453a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:17:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6d30f11f-1c77-4bbb-82ba-c4a050ef453a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:17:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3798aa8b-7382-42d9-ac77-994df442d548","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:56654","PortSpecifier":{"PortValue":56654}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3798aa8b-7382-42d9-ac77-994df442d548","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-132358.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:17:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3798aa8b-7382-42d9-ac77-994df442d548","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:56654","PortSpecifier":{"PortValue":56654}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783441050,"nanos":132501050},"http":{"id":"3798aa8b-7382-42d9-ac77-994df442d548","method":"GET","headers":{":authority":"e2e-shared-b-132358.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:17:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3798aa8b-7382-42d9-ac77-994df442d548","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-swwr5WC6AEqQlT2q_uuRa9BcHwNreA5tWNS5Uefikn2y80U3eKxdF7VZu8KO"}
{"level":"debug","ts":"2026-07-07T16:17:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3798aa8b-7382-42d9-ac77-994df442d548","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-132358.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-swwr5WC6AEqQlT2q_uuRa9BcHwNreA5tWNS5Uefikn2y80U3eKxdF7VZu8KO\"}"}
{"level":"debug","ts":"2026-07-07T16:17:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3798aa8b-7382-42d9-ac77-994df442d548","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-132358.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-07T16:17:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3798aa8b-7382-42d9-ac77-994df442d548","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"b057fea29aab48a542ba72fba8a30a8759e13a0914bbb6f617f01f703c5fda83"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-132358.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:17:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3798aa8b-7382-42d9-ac77-994df442d548","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:17:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"3798aa8b-7382-42d9-ac77-994df442d548","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-07T16:17:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3798aa8b-7382-42d9-ac77-994df442d548","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-07T16:17:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3798aa8b-7382-42d9-ac77-994df442d548","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-07T16:17:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ba910ad5-6158-49b8-9084-66a6b12b4284","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:46184","PortSpecifier":{"PortValue":46184}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ba910ad5-6158-49b8-9084-66a6b12b4284","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-9ac19f.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:17:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ba910ad5-6158-49b8-9084-66a6b12b4284","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:46184","PortSpecifier":{"PortValue":46184}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783441065,"nanos":244938735},"http":{"id":"ba910ad5-6158-49b8-9084-66a6b12b4284","method":"POST","headers":{":authority":"e2e-shared-a-9ac19f.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:17:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ba910ad5-6158-49b8-9084-66a6b12b4284","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T16:17:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ba910ad5-6158-49b8-9084-66a6b12b4284","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f6a73c6c-303e-47e7-8a1a-2f23fec1b49d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2222897e-adbc-4372-aada-e7cf61fcb2a7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/13545484d307"]}}
{"level":"debug","ts":"2026-07-07T16:17:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ba910ad5-6158-49b8-9084-66a6b12b4284","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/13545484d307"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2222897e-adbc-4372-aada-e7cf61fcb2a7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f6a73c6c-303e-47e7-8a1a-2f23fec1b49d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d62d32dbb011d2f7c6b27c2258eecc11171224936b8d6533e787a9c6adb11e8f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-9ac19f.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:17:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ba910ad5-6158-49b8-9084-66a6b12b4284","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:17:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ba910ad5-6158-49b8-9084-66a6b12b4284","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:17:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ba910ad5-6158-49b8-9084-66a6b12b4284","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9ac19f/auth-test-model-9ac19f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:17:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ba910ad5-6158-49b8-9084-66a6b12b4284","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T16:17:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ba910ad5-6158-49b8-9084-66a6b12b4284","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:17:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ba910ad5-6158-49b8-9084-66a6b12b4284","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T16:17:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ba910ad5-6158-49b8-9084-66a6b12b4284","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:17:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ba910ad5-6158-49b8-9084-66a6b12b4284","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:17:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e70af9d3-daf0-4e61-b632-aba1584d824b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:36970","PortSpecifier":{"PortValue":36970}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e70af9d3-daf0-4e61-b632-aba1584d824b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-132358.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:17:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e70af9d3-daf0-4e61-b632-aba1584d824b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:36970","PortSpecifier":{"PortValue":36970}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783441065,"nanos":288078352},"http":{"id":"e70af9d3-daf0-4e61-b632-aba1584d824b","method":"POST","headers":{":authority":"e2e-shared-b-132358.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:17:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e70af9d3-daf0-4e61-b632-aba1584d824b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T16:17:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e70af9d3-daf0-4e61-b632-aba1584d824b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f6a73c6c-303e-47e7-8a1a-2f23fec1b49d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2222897e-adbc-4372-aada-e7cf61fcb2a7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/13545484d307"]}}
{"level":"debug","ts":"2026-07-07T16:17:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e70af9d3-daf0-4e61-b632-aba1584d824b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/13545484d307"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2222897e-adbc-4372-aada-e7cf61fcb2a7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f6a73c6c-303e-47e7-8a1a-2f23fec1b49d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b057fea29aab48a542ba72fba8a30a8759e13a0914bbb6f617f01f703c5fda83"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-132358.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:17:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e70af9d3-daf0-4e61-b632-aba1584d824b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:17:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e70af9d3-daf0-4e61-b632-aba1584d824b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:17:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e70af9d3-daf0-4e61-b632-aba1584d824b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-132358/auth-test-model-132358\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:17:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e70af9d3-daf0-4e61-b632-aba1584d824b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T16:17:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e70af9d3-daf0-4e61-b632-aba1584d824b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:17:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e70af9d3-daf0-4e61-b632-aba1584d824b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T16:17:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e70af9d3-daf0-4e61-b632-aba1584d824b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:17:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e70af9d3-daf0-4e61-b632-aba1584d824b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:17:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fac375bb-2147-490c-94ad-e75767eafde0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:46186","PortSpecifier":{"PortValue":46186}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fac375bb-2147-490c-94ad-e75767eafde0","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-9ac19f.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:17:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fac375bb-2147-490c-94ad-e75767eafde0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:46186","PortSpecifier":{"PortValue":46186}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783441065,"nanos":330590495},"http":{"id":"fac375bb-2147-490c-94ad-e75767eafde0","method":"POST","headers":{":authority":"e2e-shared-a-9ac19f.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:17:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fac375bb-2147-490c-94ad-e75767eafde0","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T16:17:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fac375bb-2147-490c-94ad-e75767eafde0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f6a73c6c-303e-47e7-8a1a-2f23fec1b49d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2222897e-adbc-4372-aada-e7cf61fcb2a7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/13545484d307"]}}
{"level":"debug","ts":"2026-07-07T16:17:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fac375bb-2147-490c-94ad-e75767eafde0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/13545484d307"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2222897e-adbc-4372-aada-e7cf61fcb2a7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f6a73c6c-303e-47e7-8a1a-2f23fec1b49d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d62d32dbb011d2f7c6b27c2258eecc11171224936b8d6533e787a9c6adb11e8f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-9ac19f.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:17:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fac375bb-2147-490c-94ad-e75767eafde0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:17:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fac375bb-2147-490c-94ad-e75767eafde0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:17:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fac375bb-2147-490c-94ad-e75767eafde0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9ac19f/auth-test-model-9ac19f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:17:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fac375bb-2147-490c-94ad-e75767eafde0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T16:17:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fac375bb-2147-490c-94ad-e75767eafde0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:17:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fac375bb-2147-490c-94ad-e75767eafde0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T16:17:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fac375bb-2147-490c-94ad-e75767eafde0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:17:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fac375bb-2147-490c-94ad-e75767eafde0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:17:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8d9489e2-3155-4d8e-8aa9-8c956772fc33","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:36986","PortSpecifier":{"PortValue":36986}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8d9489e2-3155-4d8e-8aa9-8c956772fc33","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-132358.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:17:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8d9489e2-3155-4d8e-8aa9-8c956772fc33","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:36986","PortSpecifier":{"PortValue":36986}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783441065,"nanos":370988041},"http":{"id":"8d9489e2-3155-4d8e-8aa9-8c956772fc33","method":"POST","headers":{":authority":"e2e-shared-b-132358.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:17:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8d9489e2-3155-4d8e-8aa9-8c956772fc33","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T16:17:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8d9489e2-3155-4d8e-8aa9-8c956772fc33","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f6a73c6c-303e-47e7-8a1a-2f23fec1b49d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2222897e-adbc-4372-aada-e7cf61fcb2a7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/13545484d307"]}}
{"level":"debug","ts":"2026-07-07T16:17:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8d9489e2-3155-4d8e-8aa9-8c956772fc33","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/13545484d307"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2222897e-adbc-4372-aada-e7cf61fcb2a7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f6a73c6c-303e-47e7-8a1a-2f23fec1b49d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b057fea29aab48a542ba72fba8a30a8759e13a0914bbb6f617f01f703c5fda83"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-132358.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:17:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d9489e2-3155-4d8e-8aa9-8c956772fc33","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:17:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d9489e2-3155-4d8e-8aa9-8c956772fc33","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:17:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d9489e2-3155-4d8e-8aa9-8c956772fc33","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-132358/auth-test-model-132358\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:17:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8d9489e2-3155-4d8e-8aa9-8c956772fc33","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T16:17:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8d9489e2-3155-4d8e-8aa9-8c956772fc33","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:17:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8d9489e2-3155-4d8e-8aa9-8c956772fc33","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T16:17:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8d9489e2-3155-4d8e-8aa9-8c956772fc33","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:17:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8d9489e2-3155-4d8e-8aa9-8c956772fc33","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:18:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"57c1a35f-8c51-4c8a-88cf-e41c1c9ee69e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:43302","PortSpecifier":{"PortValue":43302}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"57c1a35f-8c51-4c8a-88cf-e41c1c9ee69e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-9ac19f.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:18:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"57c1a35f-8c51-4c8a-88cf-e41c1c9ee69e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:43302","PortSpecifier":{"PortValue":43302}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783441082,"nanos":615067177},"http":{"id":"57c1a35f-8c51-4c8a-88cf-e41c1c9ee69e","method":"POST","headers":{":authority":"e2e-shared-a-9ac19f.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:18:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"57c1a35f-8c51-4c8a-88cf-e41c1c9ee69e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T16:18:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"57c1a35f-8c51-4c8a-88cf-e41c1c9ee69e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f6a73c6c-303e-47e7-8a1a-2f23fec1b49d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2222897e-adbc-4372-aada-e7cf61fcb2a7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/13545484d307"]}}
{"level":"debug","ts":"2026-07-07T16:18:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"57c1a35f-8c51-4c8a-88cf-e41c1c9ee69e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/13545484d307"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2222897e-adbc-4372-aada-e7cf61fcb2a7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f6a73c6c-303e-47e7-8a1a-2f23fec1b49d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d62d32dbb011d2f7c6b27c2258eecc11171224936b8d6533e787a9c6adb11e8f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-9ac19f.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:18:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57c1a35f-8c51-4c8a-88cf-e41c1c9ee69e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:18:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57c1a35f-8c51-4c8a-88cf-e41c1c9ee69e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:18:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57c1a35f-8c51-4c8a-88cf-e41c1c9ee69e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9ac19f/auth-test-model-9ac19f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:18:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"57c1a35f-8c51-4c8a-88cf-e41c1c9ee69e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T16:18:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57c1a35f-8c51-4c8a-88cf-e41c1c9ee69e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:18:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57c1a35f-8c51-4c8a-88cf-e41c1c9ee69e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T16:18:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"57c1a35f-8c51-4c8a-88cf-e41c1c9ee69e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:18:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"57c1a35f-8c51-4c8a-88cf-e41c1c9ee69e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:18:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"27d67286-bb8a-491d-92c4-2847ade225d3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:39370","PortSpecifier":{"PortValue":39370}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"27d67286-bb8a-491d-92c4-2847ade225d3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-132358.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:18:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"27d67286-bb8a-491d-92c4-2847ade225d3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:39370","PortSpecifier":{"PortValue":39370}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783441082,"nanos":653350373},"http":{"id":"27d67286-bb8a-491d-92c4-2847ade225d3","method":"POST","headers":{":authority":"e2e-shared-b-132358.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:18:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"27d67286-bb8a-491d-92c4-2847ade225d3","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T16:18:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"27d67286-bb8a-491d-92c4-2847ade225d3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f6a73c6c-303e-47e7-8a1a-2f23fec1b49d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2222897e-adbc-4372-aada-e7cf61fcb2a7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/13545484d307"]}}
{"level":"debug","ts":"2026-07-07T16:18:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"27d67286-bb8a-491d-92c4-2847ade225d3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/13545484d307"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2222897e-adbc-4372-aada-e7cf61fcb2a7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f6a73c6c-303e-47e7-8a1a-2f23fec1b49d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b057fea29aab48a542ba72fba8a30a8759e13a0914bbb6f617f01f703c5fda83"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-132358.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:18:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27d67286-bb8a-491d-92c4-2847ade225d3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:18:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27d67286-bb8a-491d-92c4-2847ade225d3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:18:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27d67286-bb8a-491d-92c4-2847ade225d3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-132358/auth-test-model-132358\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:18:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"27d67286-bb8a-491d-92c4-2847ade225d3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T16:18:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"27d67286-bb8a-491d-92c4-2847ade225d3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T16:18:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"27d67286-bb8a-491d-92c4-2847ade225d3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T16:18:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"27d67286-bb8a-491d-92c4-2847ade225d3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:18:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"27d67286-bb8a-491d-92c4-2847ade225d3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:18:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bafa1aac-0861-4ae7-a91f-30481a702bb6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:39386","PortSpecifier":{"PortValue":39386}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bafa1aac-0861-4ae7-a91f-30481a702bb6","method":"GET","path":"/maas-api/v1/api-keys/63e5f005-2580-423f-a73b-3fe5bef7cd2b","host":"e2e-shared-b-132358.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:18:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bafa1aac-0861-4ae7-a91f-30481a702bb6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:39386","PortSpecifier":{"PortValue":39386}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783441082,"nanos":690812963},"http":{"id":"bafa1aac-0861-4ae7-a91f-30481a702bb6","method":"GET","headers":{":authority":"e2e-shared-b-132358.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/63e5f005-2580-423f-a73b-3fe5bef7cd2b",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:18:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bafa1aac-0861-4ae7-a91f-30481a702bb6","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T16:18:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bafa1aac-0861-4ae7-a91f-30481a702bb6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f6a73c6c-303e-47e7-8a1a-2f23fec1b49d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2222897e-adbc-4372-aada-e7cf61fcb2a7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/13545484d307"]}}
{"level":"debug","ts":"2026-07-07T16:18:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bafa1aac-0861-4ae7-a91f-30481a702bb6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/13545484d307"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2222897e-adbc-4372-aada-e7cf61fcb2a7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f6a73c6c-303e-47e7-8a1a-2f23fec1b49d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b057fea29aab48a542ba72fba8a30a8759e13a0914bbb6f617f01f703c5fda83"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-132358.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/63e5f005-2580-423f-a73b-3fe5bef7cd2b",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:18:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bafa1aac-0861-4ae7-a91f-30481a702bb6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:18:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bafa1aac-0861-4ae7-a91f-30481a702bb6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:18:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bafa1aac-0861-4ae7-a91f-30481a702bb6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-132358/auth-test-model-132358\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:18:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bafa1aac-0861-4ae7-a91f-30481a702bb6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T16:18:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bafa1aac-0861-4ae7-a91f-30481a702bb6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:18:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bafa1aac-0861-4ae7-a91f-30481a702bb6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T16:18:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bafa1aac-0861-4ae7-a91f-30481a702bb6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:18:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bafa1aac-0861-4ae7-a91f-30481a702bb6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:18:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"48a08cb8-30cd-4833-9d7f-159b6897dfc7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:43304","PortSpecifier":{"PortValue":43304}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"48a08cb8-30cd-4833-9d7f-159b6897dfc7","method":"GET","path":"/maas-api/v1/api-keys/63e5f005-2580-423f-a73b-3fe5bef7cd2b","host":"e2e-shared-a-9ac19f.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:18:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"48a08cb8-30cd-4833-9d7f-159b6897dfc7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:43304","PortSpecifier":{"PortValue":43304}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783441082,"nanos":726275590},"http":{"id":"48a08cb8-30cd-4833-9d7f-159b6897dfc7","method":"GET","headers":{":authority":"e2e-shared-a-9ac19f.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/63e5f005-2580-423f-a73b-3fe5bef7cd2b",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:18:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"48a08cb8-30cd-4833-9d7f-159b6897dfc7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T16:18:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"48a08cb8-30cd-4833-9d7f-159b6897dfc7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f6a73c6c-303e-47e7-8a1a-2f23fec1b49d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2222897e-adbc-4372-aada-e7cf61fcb2a7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/13545484d307"]}}
{"level":"debug","ts":"2026-07-07T16:18:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"48a08cb8-30cd-4833-9d7f-159b6897dfc7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/13545484d307"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2222897e-adbc-4372-aada-e7cf61fcb2a7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f6a73c6c-303e-47e7-8a1a-2f23fec1b49d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d62d32dbb011d2f7c6b27c2258eecc11171224936b8d6533e787a9c6adb11e8f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-9ac19f.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/63e5f005-2580-423f-a73b-3fe5bef7cd2b",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:18:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"48a08cb8-30cd-4833-9d7f-159b6897dfc7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:18:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"48a08cb8-30cd-4833-9d7f-159b6897dfc7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:18:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"48a08cb8-30cd-4833-9d7f-159b6897dfc7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9ac19f/auth-test-model-9ac19f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:18:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"48a08cb8-30cd-4833-9d7f-159b6897dfc7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T16:18:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"48a08cb8-30cd-4833-9d7f-159b6897dfc7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:18:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"48a08cb8-30cd-4833-9d7f-159b6897dfc7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T16:18:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"48a08cb8-30cd-4833-9d7f-159b6897dfc7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:18:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"48a08cb8-30cd-4833-9d7f-159b6897dfc7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:18:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fc9c0981-e236-46ce-81a4-4ef4641210cc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:44962","PortSpecifier":{"PortValue":44962}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fc9c0981-e236-46ce-81a4-4ef4641210cc","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-9ac19f.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:18:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fc9c0981-e236-46ce-81a4-4ef4641210cc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:44962","PortSpecifier":{"PortValue":44962}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783441099,"nanos":893113695},"http":{"id":"fc9c0981-e236-46ce-81a4-4ef4641210cc","method":"POST","headers":{":authority":"e2e-shared-a-9ac19f.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:18:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fc9c0981-e236-46ce-81a4-4ef4641210cc","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T16:18:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fc9c0981-e236-46ce-81a4-4ef4641210cc","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f6a73c6c-303e-47e7-8a1a-2f23fec1b49d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2222897e-adbc-4372-aada-e7cf61fcb2a7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/13545484d307"]}}
{"level":"debug","ts":"2026-07-07T16:18:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fc9c0981-e236-46ce-81a4-4ef4641210cc","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/13545484d307"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2222897e-adbc-4372-aada-e7cf61fcb2a7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f6a73c6c-303e-47e7-8a1a-2f23fec1b49d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d62d32dbb011d2f7c6b27c2258eecc11171224936b8d6533e787a9c6adb11e8f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-9ac19f.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:18:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fc9c0981-e236-46ce-81a4-4ef4641210cc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:18:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fc9c0981-e236-46ce-81a4-4ef4641210cc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:18:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fc9c0981-e236-46ce-81a4-4ef4641210cc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9ac19f/auth-test-model-9ac19f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:18:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fc9c0981-e236-46ce-81a4-4ef4641210cc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T16:18:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fc9c0981-e236-46ce-81a4-4ef4641210cc","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:18:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fc9c0981-e236-46ce-81a4-4ef4641210cc","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T16:18:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fc9c0981-e236-46ce-81a4-4ef4641210cc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:18:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fc9c0981-e236-46ce-81a4-4ef4641210cc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:18:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3740df7f-c454-4cf4-b4aa-053586c3752b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:46908","PortSpecifier":{"PortValue":46908}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3740df7f-c454-4cf4-b4aa-053586c3752b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-132358.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:18:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3740df7f-c454-4cf4-b4aa-053586c3752b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:46908","PortSpecifier":{"PortValue":46908}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783441099,"nanos":931128359},"http":{"id":"3740df7f-c454-4cf4-b4aa-053586c3752b","method":"POST","headers":{":authority":"e2e-shared-b-132358.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:18:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3740df7f-c454-4cf4-b4aa-053586c3752b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T16:18:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3740df7f-c454-4cf4-b4aa-053586c3752b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f6a73c6c-303e-47e7-8a1a-2f23fec1b49d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2222897e-adbc-4372-aada-e7cf61fcb2a7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/13545484d307"]}}
{"level":"debug","ts":"2026-07-07T16:18:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3740df7f-c454-4cf4-b4aa-053586c3752b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/13545484d307"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2222897e-adbc-4372-aada-e7cf61fcb2a7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f6a73c6c-303e-47e7-8a1a-2f23fec1b49d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b057fea29aab48a542ba72fba8a30a8759e13a0914bbb6f617f01f703c5fda83"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-132358.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:18:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3740df7f-c454-4cf4-b4aa-053586c3752b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:18:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3740df7f-c454-4cf4-b4aa-053586c3752b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:18:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3740df7f-c454-4cf4-b4aa-053586c3752b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-132358/auth-test-model-132358\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:18:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3740df7f-c454-4cf4-b4aa-053586c3752b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T16:18:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3740df7f-c454-4cf4-b4aa-053586c3752b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T16:18:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3740df7f-c454-4cf4-b4aa-053586c3752b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T16:18:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3740df7f-c454-4cf4-b4aa-053586c3752b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:18:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3740df7f-c454-4cf4-b4aa-053586c3752b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:18:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"521bc7a4-a192-42ea-85ba-da2a71b1c08f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:44976","PortSpecifier":{"PortValue":44976}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"521bc7a4-a192-42ea-85ba-da2a71b1c08f","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-9ac19f.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:18:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"521bc7a4-a192-42ea-85ba-da2a71b1c08f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:44976","PortSpecifier":{"PortValue":44976}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783441099,"nanos":971205062},"http":{"id":"521bc7a4-a192-42ea-85ba-da2a71b1c08f","method":"POST","headers":{":authority":"e2e-shared-a-9ac19f.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:18:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"521bc7a4-a192-42ea-85ba-da2a71b1c08f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1UrWcO4suNamggh3f_pIx3K6kQEQzvbRV2i4TQgqpKnerSRaDuizxa1u4kbfQ"}
{"level":"debug","ts":"2026-07-07T16:18:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"521bc7a4-a192-42ea-85ba-da2a71b1c08f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9ac19f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1UrWcO4suNamggh3f_pIx3K6kQEQzvbRV2i4TQgqpKnerSRaDuizxa1u4kbfQ\"}"}
{"level":"debug","ts":"2026-07-07T16:18:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"521bc7a4-a192-42ea-85ba-da2a71b1c08f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9ac19f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"893983b1-95bc-4a05-9c75-03c2b4956380","keyName":"e2e-auth-iso-a-241aa8","subscription":"e2e-auth-iso-c74889","tenant":"e2e-shared-a-9ac19f","userId":"893983b1-95bc-4a05-9c75-03c2b4956380","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T16:18:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"521bc7a4-a192-42ea-85ba-da2a71b1c08f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:18:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"521bc7a4-a192-42ea-85ba-da2a71b1c08f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:18:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"521bc7a4-a192-42ea-85ba-da2a71b1c08f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:18:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"521bc7a4-a192-42ea-85ba-da2a71b1c08f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9ac19f/auth-test-model-9ac19f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:18:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"521bc7a4-a192-42ea-85ba-da2a71b1c08f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-07T16:18:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"521bc7a4-a192-42ea-85ba-da2a71b1c08f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T16:18:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"521bc7a4-a192-42ea-85ba-da2a71b1c08f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-c74889"}
{"level":"debug","ts":"2026-07-07T16:18:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"521bc7a4-a192-42ea-85ba-da2a71b1c08f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T16:18:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"521bc7a4-a192-42ea-85ba-da2a71b1c08f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:18:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"521bc7a4-a192-42ea-85ba-da2a71b1c08f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:18:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ee7c441afcf75013790e9eb98f6b3d8b8b32c9f6458fa6f1889675f87173f2bd"}
{"level":"info","ts":"2026-07-07T16:18:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/09c8cdaaa4f641ea316d8ac243fb470b43efb0ee5b7aec8ce66080734a4aee22"}
{"level":"info","ts":"2026-07-07T16:18:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/55892b463fa864b69bcb768c8dbd385c5e9dd138f9d01e1a011a909938ca2d42"}
{"level":"info","ts":"2026-07-07T16:18:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c5014d56d3525cff0595628bd3fb0cf6f6abb5e601f4e61f3913fd161975872d"}
{"level":"info","ts":"2026-07-07T16:18:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0f70378f148d8d364872bbe5186515a59efdc5bed0d87c5141a6e4eb1c2dca36"}
{"level":"info","ts":"2026-07-07T16:18:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/39755643a2186344fcecae3979bf3bd8ff0ccee87824bbaee6a8bfe87e09c92d"}
{"level":"info","ts":"2026-07-07T16:18:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/39adbc2bccbd59e1e9e8ba70808ac1b01f32f72c553085a13bc041e74313b25d"}
{"level":"info","ts":"2026-07-07T16:18:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/48a65ea19ff48172b226e6a10331e9dff6d70cc35e2b25e43dd74c739ba3650f"}
{"level":"info","ts":"2026-07-07T16:18:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7177d4470958645e7b8b4a2fd209c363f466d77d410e3781d4ba5def65d0ce0b"}
{"level":"info","ts":"2026-07-07T16:18:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eac94c2666d26daf19cfea6bd6d3451118f5feb2893f944596cfa6c08596ec09"}
{"level":"info","ts":"2026-07-07T16:18:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2d7487a9ce210f7ec61276a72c8c78a9d726cfc1d9b1065b1c7d11af4a3bb19c"}
{"level":"info","ts":"2026-07-07T16:18:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/caec15949f9ff016c1108ed92e7be205170a4d8ac965756aef0fbb2c0b94865e"}
{"level":"info","ts":"2026-07-07T16:18:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b50cecfdd772c4464400be6cf1ef5bf191de479f1122784b33d3fe607c0b4e1e"}
{"level":"info","ts":"2026-07-07T16:18:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0a3611a6a83bab853c0e5a5be64f181048715e65d8bb0b72992c20a7b4f930e4"}
{"level":"info","ts":"2026-07-07T16:18:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ebfd599fa1662cb625ae2237b8a3406394f88dff773f8fc73e5702e5764a20fb"}
{"level":"info","ts":"2026-07-07T16:18:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eb8a78fb7bf56eb5bcf280a1ddce0f2911c21c6765932e6a70b6010780d3ae8e"}
{"level":"debug","ts":"2026-07-07T16:18:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"380947789ff0e315a586715e7976f579d3f4beb61f2aa5dbd5ee2135f141f8fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:18:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:18:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"380947789ff0e315a586715e7976f579d3f4beb61f2aa5dbd5ee2135f141f8fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"380947789ff0e315a586715e7976f579d3f4beb61f2aa5dbd5ee2135f141f8fb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:18:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/380947789ff0e315a586715e7976f579d3f4beb61f2aa5dbd5ee2135f141f8fb"}
{"level":"debug","ts":"2026-07-07T16:18:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"380947789ff0e315a586715e7976f579d3f4beb61f2aa5dbd5ee2135f141f8fb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:18:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/380947789ff0e315a586715e7976f579d3f4beb61f2aa5dbd5ee2135f141f8fb"}
{"level":"debug","ts":"2026-07-07T16:18:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"380947789ff0e315a586715e7976f579d3f4beb61f2aa5dbd5ee2135f141f8fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:18:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:18:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["380947789ff0e315a586715e7976f579d3f4beb61f2aa5dbd5ee2135f141f8fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"380947789ff0e315a586715e7976f579d3f4beb61f2aa5dbd5ee2135f141f8fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"380947789ff0e315a586715e7976f579d3f4beb61f2aa5dbd5ee2135f141f8fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:18:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:18:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"380947789ff0e315a586715e7976f579d3f4beb61f2aa5dbd5ee2135f141f8fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"380947789ff0e315a586715e7976f579d3f4beb61f2aa5dbd5ee2135f141f8fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"380947789ff0e315a586715e7976f579d3f4beb61f2aa5dbd5ee2135f141f8fb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:18:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/380947789ff0e315a586715e7976f579d3f4beb61f2aa5dbd5ee2135f141f8fb"}
{"level":"debug","ts":"2026-07-07T16:18:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"380947789ff0e315a586715e7976f579d3f4beb61f2aa5dbd5ee2135f141f8fb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:18:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/380947789ff0e315a586715e7976f579d3f4beb61f2aa5dbd5ee2135f141f8fb"}
{"level":"debug","ts":"2026-07-07T16:18:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"380947789ff0e315a586715e7976f579d3f4beb61f2aa5dbd5ee2135f141f8fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:18:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:18:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["380947789ff0e315a586715e7976f579d3f4beb61f2aa5dbd5ee2135f141f8fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"380947789ff0e315a586715e7976f579d3f4beb61f2aa5dbd5ee2135f141f8fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"380947789ff0e315a586715e7976f579d3f4beb61f2aa5dbd5ee2135f141f8fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:18:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:18:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"380947789ff0e315a586715e7976f579d3f4beb61f2aa5dbd5ee2135f141f8fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"380947789ff0e315a586715e7976f579d3f4beb61f2aa5dbd5ee2135f141f8fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"380947789ff0e315a586715e7976f579d3f4beb61f2aa5dbd5ee2135f141f8fb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:18:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/380947789ff0e315a586715e7976f579d3f4beb61f2aa5dbd5ee2135f141f8fb"}
{"level":"debug","ts":"2026-07-07T16:18:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"380947789ff0e315a586715e7976f579d3f4beb61f2aa5dbd5ee2135f141f8fb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:18:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/380947789ff0e315a586715e7976f579d3f4beb61f2aa5dbd5ee2135f141f8fb"}
{"level":"debug","ts":"2026-07-07T16:18:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"380947789ff0e315a586715e7976f579d3f4beb61f2aa5dbd5ee2135f141f8fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:18:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:18:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["380947789ff0e315a586715e7976f579d3f4beb61f2aa5dbd5ee2135f141f8fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"380947789ff0e315a586715e7976f579d3f4beb61f2aa5dbd5ee2135f141f8fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"380947789ff0e315a586715e7976f579d3f4beb61f2aa5dbd5ee2135f141f8fb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:18:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/380947789ff0e315a586715e7976f579d3f4beb61f2aa5dbd5ee2135f141f8fb"}
{"level":"debug","ts":"2026-07-07T16:18:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4def18ce8171737123b29aa55433ae160f308818d27fc4aa9d00be669c0cbffa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:18:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:18:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4def18ce8171737123b29aa55433ae160f308818d27fc4aa9d00be669c0cbffa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4def18ce8171737123b29aa55433ae160f308818d27fc4aa9d00be669c0cbffa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4def18ce8171737123b29aa55433ae160f308818d27fc4aa9d00be669c0cbffa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:18:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4def18ce8171737123b29aa55433ae160f308818d27fc4aa9d00be669c0cbffa"}
{"level":"debug","ts":"2026-07-07T16:18:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4def18ce8171737123b29aa55433ae160f308818d27fc4aa9d00be669c0cbffa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:18:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4def18ce8171737123b29aa55433ae160f308818d27fc4aa9d00be669c0cbffa"}
{"level":"debug","ts":"2026-07-07T16:18:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4def18ce8171737123b29aa55433ae160f308818d27fc4aa9d00be669c0cbffa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:18:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:18:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4def18ce8171737123b29aa55433ae160f308818d27fc4aa9d00be669c0cbffa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4def18ce8171737123b29aa55433ae160f308818d27fc4aa9d00be669c0cbffa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4def18ce8171737123b29aa55433ae160f308818d27fc4aa9d00be669c0cbffa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:18:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4def18ce8171737123b29aa55433ae160f308818d27fc4aa9d00be669c0cbffa"}
{"level":"debug","ts":"2026-07-07T16:18:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25720add6d568b4d76f17be6580d7469dec47397aaf86c831bbde5ba8d8ce402","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:18:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:18:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25720add6d568b4d76f17be6580d7469dec47397aaf86c831bbde5ba8d8ce402","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25720add6d568b4d76f17be6580d7469dec47397aaf86c831bbde5ba8d8ce402","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25720add6d568b4d76f17be6580d7469dec47397aaf86c831bbde5ba8d8ce402","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:18:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25720add6d568b4d76f17be6580d7469dec47397aaf86c831bbde5ba8d8ce402"}
{"level":"debug","ts":"2026-07-07T16:18:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25720add6d568b4d76f17be6580d7469dec47397aaf86c831bbde5ba8d8ce402","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:18:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25720add6d568b4d76f17be6580d7469dec47397aaf86c831bbde5ba8d8ce402"}
{"level":"debug","ts":"2026-07-07T16:18:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25720add6d568b4d76f17be6580d7469dec47397aaf86c831bbde5ba8d8ce402","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:18:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:18:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["25720add6d568b4d76f17be6580d7469dec47397aaf86c831bbde5ba8d8ce402"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25720add6d568b4d76f17be6580d7469dec47397aaf86c831bbde5ba8d8ce402","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25720add6d568b4d76f17be6580d7469dec47397aaf86c831bbde5ba8d8ce402","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:18:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:18:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25720add6d568b4d76f17be6580d7469dec47397aaf86c831bbde5ba8d8ce402","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dfb11436010a6987c4c4935972ea62e2e861b125c3e91ff351784e3ba5c0b428","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:18:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:18:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25720add6d568b4d76f17be6580d7469dec47397aaf86c831bbde5ba8d8ce402"}
{"level":"info","ts":"2026-07-07T16:18:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dfb11436010a6987c4c4935972ea62e2e861b125c3e91ff351784e3ba5c0b428","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25720add6d568b4d76f17be6580d7469dec47397aaf86c831bbde5ba8d8ce402","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:18:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:18:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["25720add6d568b4d76f17be6580d7469dec47397aaf86c831bbde5ba8d8ce402"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dfb11436010a6987c4c4935972ea62e2e861b125c3e91ff351784e3ba5c0b428"}
{"level":"info","ts":"2026-07-07T16:18:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25720add6d568b4d76f17be6580d7469dec47397aaf86c831bbde5ba8d8ce402","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dfb11436010a6987c4c4935972ea62e2e861b125c3e91ff351784e3ba5c0b428","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:18:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:18:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dfb11436010a6987c4c4935972ea62e2e861b125c3e91ff351784e3ba5c0b428"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dfb11436010a6987c4c4935972ea62e2e861b125c3e91ff351784e3ba5c0b428","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25720add6d568b4d76f17be6580d7469dec47397aaf86c831bbde5ba8d8ce402","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:18:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:18:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25720add6d568b4d76f17be6580d7469dec47397aaf86c831bbde5ba8d8ce402"}
{"level":"info","ts":"2026-07-07T16:18:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25720add6d568b4d76f17be6580d7469dec47397aaf86c831bbde5ba8d8ce402","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dfb11436010a6987c4c4935972ea62e2e861b125c3e91ff351784e3ba5c0b428","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:18:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:18:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dfb11436010a6987c4c4935972ea62e2e861b125c3e91ff351784e3ba5c0b428","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25720add6d568b4d76f17be6580d7469dec47397aaf86c831bbde5ba8d8ce402","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:18:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:18:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["25720add6d568b4d76f17be6580d7469dec47397aaf86c831bbde5ba8d8ce402"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dfb11436010a6987c4c4935972ea62e2e861b125c3e91ff351784e3ba5c0b428"}
{"level":"info","ts":"2026-07-07T16:18:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25720add6d568b4d76f17be6580d7469dec47397aaf86c831bbde5ba8d8ce402","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dfb11436010a6987c4c4935972ea62e2e861b125c3e91ff351784e3ba5c0b428","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:18:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:18:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dfb11436010a6987c4c4935972ea62e2e861b125c3e91ff351784e3ba5c0b428"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25720add6d568b4d76f17be6580d7469dec47397aaf86c831bbde5ba8d8ce402"}
{"level":"info","ts":"2026-07-07T16:18:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dfb11436010a6987c4c4935972ea62e2e861b125c3e91ff351784e3ba5c0b428","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25720add6d568b4d76f17be6580d7469dec47397aaf86c831bbde5ba8d8ce402","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dfb11436010a6987c4c4935972ea62e2e861b125c3e91ff351784e3ba5c0b428","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:18:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:18:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dfb11436010a6987c4c4935972ea62e2e861b125c3e91ff351784e3ba5c0b428","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dfb11436010a6987c4c4935972ea62e2e861b125c3e91ff351784e3ba5c0b428","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dfb11436010a6987c4c4935972ea62e2e861b125c3e91ff351784e3ba5c0b428","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:18:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dfb11436010a6987c4c4935972ea62e2e861b125c3e91ff351784e3ba5c0b428"}
{"level":"debug","ts":"2026-07-07T16:18:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dfb11436010a6987c4c4935972ea62e2e861b125c3e91ff351784e3ba5c0b428","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:18:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:18:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dfb11436010a6987c4c4935972ea62e2e861b125c3e91ff351784e3ba5c0b428"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25720add6d568b4d76f17be6580d7469dec47397aaf86c831bbde5ba8d8ce402"}
{"level":"info","ts":"2026-07-07T16:18:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dfb11436010a6987c4c4935972ea62e2e861b125c3e91ff351784e3ba5c0b428","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dfb11436010a6987c4c4935972ea62e2e861b125c3e91ff351784e3ba5c0b428","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:18:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:18:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dfb11436010a6987c4c4935972ea62e2e861b125c3e91ff351784e3ba5c0b428"}
{"level":"info","ts":"2026-07-07T16:18:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dfb11436010a6987c4c4935972ea62e2e861b125c3e91ff351784e3ba5c0b428","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dfb11436010a6987c4c4935972ea62e2e861b125c3e91ff351784e3ba5c0b428","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dfb11436010a6987c4c4935972ea62e2e861b125c3e91ff351784e3ba5c0b428","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:18:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dfb11436010a6987c4c4935972ea62e2e861b125c3e91ff351784e3ba5c0b428"}
{"level":"debug","ts":"2026-07-07T16:18:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dfb11436010a6987c4c4935972ea62e2e861b125c3e91ff351784e3ba5c0b428","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:18:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dfb11436010a6987c4c4935972ea62e2e861b125c3e91ff351784e3ba5c0b428"}
{"level":"debug","ts":"2026-07-07T16:18:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dfb11436010a6987c4c4935972ea62e2e861b125c3e91ff351784e3ba5c0b428","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:18:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:18:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dfb11436010a6987c4c4935972ea62e2e861b125c3e91ff351784e3ba5c0b428"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dfb11436010a6987c4c4935972ea62e2e861b125c3e91ff351784e3ba5c0b428","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dfb11436010a6987c4c4935972ea62e2e861b125c3e91ff351784e3ba5c0b428","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:18:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dfb11436010a6987c4c4935972ea62e2e861b125c3e91ff351784e3ba5c0b428"}
{"level":"debug","ts":"2026-07-07T16:18:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82bac9eab702e4c9a7c5153ab2c125a4404481d523909aeb4dd212b254730015","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:18:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:18:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82bac9eab702e4c9a7c5153ab2c125a4404481d523909aeb4dd212b254730015","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82bac9eab702e4c9a7c5153ab2c125a4404481d523909aeb4dd212b254730015","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:18:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:18:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82bac9eab702e4c9a7c5153ab2c125a4404481d523909aeb4dd212b254730015"}
{"level":"info","ts":"2026-07-07T16:18:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82bac9eab702e4c9a7c5153ab2c125a4404481d523909aeb4dd212b254730015","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82bac9eab702e4c9a7c5153ab2c125a4404481d523909aeb4dd212b254730015","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:18:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:18:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T16:18:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"82bac9eab702e4c9a7c5153ab2c125a4404481d523909aeb4dd212b254730015","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"82bac9eab702e4c9a7c5153ab2c125a4404481d523909aeb4dd212b254730015\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T16:18:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"82bac9eab702e4c9a7c5153ab2c125a4404481d523909aeb4dd212b254730015","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"82bac9eab702e4c9a7c5153ab2c125a4404481d523909aeb4dd212b254730015","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:18:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82bac9eab702e4c9a7c5153ab2c125a4404481d523909aeb4dd212b254730015"}
{"level":"info","ts":"2026-07-07T16:18:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82bac9eab702e4c9a7c5153ab2c125a4404481d523909aeb4dd212b254730015"}
{"level":"debug","ts":"2026-07-07T16:18:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9da72e13071f20745699022a6f5f4003f80e448459952440117999da1dfa69d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:18:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:18:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f9da72e13071f20745699022a6f5f4003f80e448459952440117999da1dfa69d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9da72e13071f20745699022a6f5f4003f80e448459952440117999da1dfa69d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:18:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:18:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9da72e13071f20745699022a6f5f4003f80e448459952440117999da1dfa69d"}
{"level":"info","ts":"2026-07-07T16:18:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f9da72e13071f20745699022a6f5f4003f80e448459952440117999da1dfa69d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82bac9eab702e4c9a7c5153ab2c125a4404481d523909aeb4dd212b254730015","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:18:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:18:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["82bac9eab702e4c9a7c5153ab2c125a4404481d523909aeb4dd212b254730015"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9da72e13071f20745699022a6f5f4003f80e448459952440117999da1dfa69d"}
{"level":"info","ts":"2026-07-07T16:18:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82bac9eab702e4c9a7c5153ab2c125a4404481d523909aeb4dd212b254730015","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f9da72e13071f20745699022a6f5f4003f80e448459952440117999da1dfa69d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"82bac9eab702e4c9a7c5153ab2c125a4404481d523909aeb4dd212b254730015","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:18:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9da72e13071f20745699022a6f5f4003f80e448459952440117999da1dfa69d"}
{"level":"debug","ts":"2026-07-07T16:18:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9da72e13071f20745699022a6f5f4003f80e448459952440117999da1dfa69d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:18:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:18:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f9da72e13071f20745699022a6f5f4003f80e448459952440117999da1dfa69d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f9da72e13071f20745699022a6f5f4003f80e448459952440117999da1dfa69d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:18:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82bac9eab702e4c9a7c5153ab2c125a4404481d523909aeb4dd212b254730015"}
{"level":"debug","ts":"2026-07-07T16:18:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9da72e13071f20745699022a6f5f4003f80e448459952440117999da1dfa69d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:18:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:18:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f9da72e13071f20745699022a6f5f4003f80e448459952440117999da1dfa69d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f9da72e13071f20745699022a6f5f4003f80e448459952440117999da1dfa69d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f9da72e13071f20745699022a6f5f4003f80e448459952440117999da1dfa69d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:18:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9da72e13071f20745699022a6f5f4003f80e448459952440117999da1dfa69d"}
{"level":"debug","ts":"2026-07-07T16:18:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f9da72e13071f20745699022a6f5f4003f80e448459952440117999da1dfa69d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:18:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9da72e13071f20745699022a6f5f4003f80e448459952440117999da1dfa69d"}
{"level":"debug","ts":"2026-07-07T16:18:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9da72e13071f20745699022a6f5f4003f80e448459952440117999da1dfa69d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:18:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:18:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f9da72e13071f20745699022a6f5f4003f80e448459952440117999da1dfa69d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f9da72e13071f20745699022a6f5f4003f80e448459952440117999da1dfa69d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f9da72e13071f20745699022a6f5f4003f80e448459952440117999da1dfa69d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69a1a5d8a46d08d48ab14f308f3b3c272ee0b7c92a040be9991a1feb782aa98f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:18:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:18:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9da72e13071f20745699022a6f5f4003f80e448459952440117999da1dfa69d"}
{"level":"info","ts":"2026-07-07T16:18:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69a1a5d8a46d08d48ab14f308f3b3c272ee0b7c92a040be9991a1feb782aa98f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69a1a5d8a46d08d48ab14f308f3b3c272ee0b7c92a040be9991a1feb782aa98f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:18:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:18:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69a1a5d8a46d08d48ab14f308f3b3c272ee0b7c92a040be9991a1feb782aa98f"}
{"level":"info","ts":"2026-07-07T16:18:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69a1a5d8a46d08d48ab14f308f3b3c272ee0b7c92a040be9991a1feb782aa98f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69a1a5d8a46d08d48ab14f308f3b3c272ee0b7c92a040be9991a1feb782aa98f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:18:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:18:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T16:18:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"69a1a5d8a46d08d48ab14f308f3b3c272ee0b7c92a040be9991a1feb782aa98f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"69a1a5d8a46d08d48ab14f308f3b3c272ee0b7c92a040be9991a1feb782aa98f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T16:18:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69a1a5d8a46d08d48ab14f308f3b3c272ee0b7c92a040be9991a1feb782aa98f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69a1a5d8a46d08d48ab14f308f3b3c272ee0b7c92a040be9991a1feb782aa98f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:18:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69a1a5d8a46d08d48ab14f308f3b3c272ee0b7c92a040be9991a1feb782aa98f"}
{"level":"debug","ts":"2026-07-07T16:18:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a13f41ac1a044179bf5b80fadc3b0b5a45f2af79ed78dc089fae4e3efd9ffa3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:18:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:18:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a13f41ac1a044179bf5b80fadc3b0b5a45f2af79ed78dc089fae4e3efd9ffa3a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a13f41ac1a044179bf5b80fadc3b0b5a45f2af79ed78dc089fae4e3efd9ffa3a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a13f41ac1a044179bf5b80fadc3b0b5a45f2af79ed78dc089fae4e3efd9ffa3a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:18:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69a1a5d8a46d08d48ab14f308f3b3c272ee0b7c92a040be9991a1feb782aa98f"}
{"level":"debug","ts":"2026-07-07T16:18:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a13f41ac1a044179bf5b80fadc3b0b5a45f2af79ed78dc089fae4e3efd9ffa3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:18:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:18:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a13f41ac1a044179bf5b80fadc3b0b5a45f2af79ed78dc089fae4e3efd9ffa3a"}
{"level":"info","ts":"2026-07-07T16:18:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a13f41ac1a044179bf5b80fadc3b0b5a45f2af79ed78dc089fae4e3efd9ffa3a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69a1a5d8a46d08d48ab14f308f3b3c272ee0b7c92a040be9991a1feb782aa98f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:18:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:18:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["69a1a5d8a46d08d48ab14f308f3b3c272ee0b7c92a040be9991a1feb782aa98f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69a1a5d8a46d08d48ab14f308f3b3c272ee0b7c92a040be9991a1feb782aa98f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a13f41ac1a044179bf5b80fadc3b0b5a45f2af79ed78dc089fae4e3efd9ffa3a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69a1a5d8a46d08d48ab14f308f3b3c272ee0b7c92a040be9991a1feb782aa98f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:18:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a13f41ac1a044179bf5b80fadc3b0b5a45f2af79ed78dc089fae4e3efd9ffa3a"}
{"level":"debug","ts":"2026-07-07T16:18:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a13f41ac1a044179bf5b80fadc3b0b5a45f2af79ed78dc089fae4e3efd9ffa3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:18:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:18:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a13f41ac1a044179bf5b80fadc3b0b5a45f2af79ed78dc089fae4e3efd9ffa3a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:18:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69a1a5d8a46d08d48ab14f308f3b3c272ee0b7c92a040be9991a1feb782aa98f"}
{"level":"info","ts":"2026-07-07T16:18:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a13f41ac1a044179bf5b80fadc3b0b5a45f2af79ed78dc089fae4e3efd9ffa3a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:18:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a13f41ac1a044179bf5b80fadc3b0b5a45f2af79ed78dc089fae4e3efd9ffa3a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:18:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a13f41ac1a044179bf5b80fadc3b0b5a45f2af79ed78dc089fae4e3efd9ffa3a"}
{"level":"debug","ts":"2026-07-07T16:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9063a7d42a12d017c0b4a075f7e4c8b78dd7cb3a6ee36f6b826051ef3e208148","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:19:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:19:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9063a7d42a12d017c0b4a075f7e4c8b78dd7cb3a6ee36f6b826051ef3e208148","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9063a7d42a12d017c0b4a075f7e4c8b78dd7cb3a6ee36f6b826051ef3e208148","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9063a7d42a12d017c0b4a075f7e4c8b78dd7cb3a6ee36f6b826051ef3e208148"}
{"level":"debug","ts":"2026-07-07T16:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9063a7d42a12d017c0b4a075f7e4c8b78dd7cb3a6ee36f6b826051ef3e208148","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9063a7d42a12d017c0b4a075f7e4c8b78dd7cb3a6ee36f6b826051ef3e208148"}
{"level":"debug","ts":"2026-07-07T16:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9063a7d42a12d017c0b4a075f7e4c8b78dd7cb3a6ee36f6b826051ef3e208148","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:19:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:19:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9063a7d42a12d017c0b4a075f7e4c8b78dd7cb3a6ee36f6b826051ef3e208148"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9063a7d42a12d017c0b4a075f7e4c8b78dd7cb3a6ee36f6b826051ef3e208148","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9063a7d42a12d017c0b4a075f7e4c8b78dd7cb3a6ee36f6b826051ef3e208148","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:19:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:19:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9063a7d42a12d017c0b4a075f7e4c8b78dd7cb3a6ee36f6b826051ef3e208148","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9063a7d42a12d017c0b4a075f7e4c8b78dd7cb3a6ee36f6b826051ef3e208148","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9063a7d42a12d017c0b4a075f7e4c8b78dd7cb3a6ee36f6b826051ef3e208148","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9063a7d42a12d017c0b4a075f7e4c8b78dd7cb3a6ee36f6b826051ef3e208148"}
{"level":"debug","ts":"2026-07-07T16:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9063a7d42a12d017c0b4a075f7e4c8b78dd7cb3a6ee36f6b826051ef3e208148","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9063a7d42a12d017c0b4a075f7e4c8b78dd7cb3a6ee36f6b826051ef3e208148"}
{"level":"debug","ts":"2026-07-07T16:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9063a7d42a12d017c0b4a075f7e4c8b78dd7cb3a6ee36f6b826051ef3e208148","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:19:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:19:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9063a7d42a12d017c0b4a075f7e4c8b78dd7cb3a6ee36f6b826051ef3e208148"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9063a7d42a12d017c0b4a075f7e4c8b78dd7cb3a6ee36f6b826051ef3e208148","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9063a7d42a12d017c0b4a075f7e4c8b78dd7cb3a6ee36f6b826051ef3e208148","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:19:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:19:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9063a7d42a12d017c0b4a075f7e4c8b78dd7cb3a6ee36f6b826051ef3e208148","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9063a7d42a12d017c0b4a075f7e4c8b78dd7cb3a6ee36f6b826051ef3e208148","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9063a7d42a12d017c0b4a075f7e4c8b78dd7cb3a6ee36f6b826051ef3e208148","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9063a7d42a12d017c0b4a075f7e4c8b78dd7cb3a6ee36f6b826051ef3e208148"}
{"level":"debug","ts":"2026-07-07T16:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7d4d1247164c844ad5b62aec05130883f81541b2665126fd9bd31a415cc9fbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:19:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:19:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7d4d1247164c844ad5b62aec05130883f81541b2665126fd9bd31a415cc9fbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9063a7d42a12d017c0b4a075f7e4c8b78dd7cb3a6ee36f6b826051ef3e208148","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7d4d1247164c844ad5b62aec05130883f81541b2665126fd9bd31a415cc9fbe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9063a7d42a12d017c0b4a075f7e4c8b78dd7cb3a6ee36f6b826051ef3e208148"}
{"level":"debug","ts":"2026-07-07T16:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7d4d1247164c844ad5b62aec05130883f81541b2665126fd9bd31a415cc9fbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:19:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:19:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7d4d1247164c844ad5b62aec05130883f81541b2665126fd9bd31a415cc9fbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7d4d1247164c844ad5b62aec05130883f81541b2665126fd9bd31a415cc9fbe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7d4d1247164c844ad5b62aec05130883f81541b2665126fd9bd31a415cc9fbe"}
{"level":"debug","ts":"2026-07-07T16:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7d4d1247164c844ad5b62aec05130883f81541b2665126fd9bd31a415cc9fbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9063a7d42a12d017c0b4a075f7e4c8b78dd7cb3a6ee36f6b826051ef3e208148","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:19:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:19:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9063a7d42a12d017c0b4a075f7e4c8b78dd7cb3a6ee36f6b826051ef3e208148"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7d4d1247164c844ad5b62aec05130883f81541b2665126fd9bd31a415cc9fbe"}
{"level":"info","ts":"2026-07-07T16:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9063a7d42a12d017c0b4a075f7e4c8b78dd7cb3a6ee36f6b826051ef3e208148","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9063a7d42a12d017c0b4a075f7e4c8b78dd7cb3a6ee36f6b826051ef3e208148","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9063a7d42a12d017c0b4a075f7e4c8b78dd7cb3a6ee36f6b826051ef3e208148"}
{"level":"debug","ts":"2026-07-07T16:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc57ddab147121621d9d92cf6ad239c173c97d9b0ea2358bf4cb8f8a39023e61","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:19:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:19:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc57ddab147121621d9d92cf6ad239c173c97d9b0ea2358bf4cb8f8a39023e61","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc57ddab147121621d9d92cf6ad239c173c97d9b0ea2358bf4cb8f8a39023e61","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc57ddab147121621d9d92cf6ad239c173c97d9b0ea2358bf4cb8f8a39023e61","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc57ddab147121621d9d92cf6ad239c173c97d9b0ea2358bf4cb8f8a39023e61"}
{"level":"debug","ts":"2026-07-07T16:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7d4d1247164c844ad5b62aec05130883f81541b2665126fd9bd31a415cc9fbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:19:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:19:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a7d4d1247164c844ad5b62aec05130883f81541b2665126fd9bd31a415cc9fbe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc57ddab147121621d9d92cf6ad239c173c97d9b0ea2358bf4cb8f8a39023e61"}
{"level":"info","ts":"2026-07-07T16:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7d4d1247164c844ad5b62aec05130883f81541b2665126fd9bd31a415cc9fbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc57ddab147121621d9d92cf6ad239c173c97d9b0ea2358bf4cb8f8a39023e61","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:19:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:19:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc57ddab147121621d9d92cf6ad239c173c97d9b0ea2358bf4cb8f8a39023e61"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc57ddab147121621d9d92cf6ad239c173c97d9b0ea2358bf4cb8f8a39023e61","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7d4d1247164c844ad5b62aec05130883f81541b2665126fd9bd31a415cc9fbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:19:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:19:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7d4d1247164c844ad5b62aec05130883f81541b2665126fd9bd31a415cc9fbe"}
{"level":"info","ts":"2026-07-07T16:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7d4d1247164c844ad5b62aec05130883f81541b2665126fd9bd31a415cc9fbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc57ddab147121621d9d92cf6ad239c173c97d9b0ea2358bf4cb8f8a39023e61","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:19:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:19:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc57ddab147121621d9d92cf6ad239c173c97d9b0ea2358bf4cb8f8a39023e61"}
{"level":"info","ts":"2026-07-07T16:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc57ddab147121621d9d92cf6ad239c173c97d9b0ea2358bf4cb8f8a39023e61","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7d4d1247164c844ad5b62aec05130883f81541b2665126fd9bd31a415cc9fbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0762d439f2b7af197178e48af58ec040bb033c44470a73948a06fd800eb60496","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:19:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:19:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0762d439f2b7af197178e48af58ec040bb033c44470a73948a06fd800eb60496","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc57ddab147121621d9d92cf6ad239c173c97d9b0ea2358bf4cb8f8a39023e61","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:19:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:19:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc57ddab147121621d9d92cf6ad239c173c97d9b0ea2358bf4cb8f8a39023e61"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7d4d1247164c844ad5b62aec05130883f81541b2665126fd9bd31a415cc9fbe"}
{"level":"info","ts":"2026-07-07T16:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc57ddab147121621d9d92cf6ad239c173c97d9b0ea2358bf4cb8f8a39023e61","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7d4d1247164c844ad5b62aec05130883f81541b2665126fd9bd31a415cc9fbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:19:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:19:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a7d4d1247164c844ad5b62aec05130883f81541b2665126fd9bd31a415cc9fbe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0762d439f2b7af197178e48af58ec040bb033c44470a73948a06fd800eb60496"}
{"level":"info","ts":"2026-07-07T16:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7d4d1247164c844ad5b62aec05130883f81541b2665126fd9bd31a415cc9fbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0762d439f2b7af197178e48af58ec040bb033c44470a73948a06fd800eb60496","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:19:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:19:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0762d439f2b7af197178e48af58ec040bb033c44470a73948a06fd800eb60496"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0762d439f2b7af197178e48af58ec040bb033c44470a73948a06fd800eb60496","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc57ddab147121621d9d92cf6ad239c173c97d9b0ea2358bf4cb8f8a39023e61","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:19:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:19:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc57ddab147121621d9d92cf6ad239c173c97d9b0ea2358bf4cb8f8a39023e61"}
{"level":"info","ts":"2026-07-07T16:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc57ddab147121621d9d92cf6ad239c173c97d9b0ea2358bf4cb8f8a39023e61","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7d4d1247164c844ad5b62aec05130883f81541b2665126fd9bd31a415cc9fbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:19:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:19:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7d4d1247164c844ad5b62aec05130883f81541b2665126fd9bd31a415cc9fbe"}
{"level":"info","ts":"2026-07-07T16:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7d4d1247164c844ad5b62aec05130883f81541b2665126fd9bd31a415cc9fbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0762d439f2b7af197178e48af58ec040bb033c44470a73948a06fd800eb60496","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:19:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:19:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:19:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0762d439f2b7af197178e48af58ec040bb033c44470a73948a06fd800eb60496","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:19:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc57ddab147121621d9d92cf6ad239c173c97d9b0ea2358bf4cb8f8a39023e61","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:19:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:19:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc57ddab147121621d9d92cf6ad239c173c97d9b0ea2358bf4cb8f8a39023e61"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:19:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0762d439f2b7af197178e48af58ec040bb033c44470a73948a06fd800eb60496"}
{"level":"info","ts":"2026-07-07T16:19:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc57ddab147121621d9d92cf6ad239c173c97d9b0ea2358bf4cb8f8a39023e61","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:19:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7d4d1247164c844ad5b62aec05130883f81541b2665126fd9bd31a415cc9fbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:19:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:19:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a7d4d1247164c844ad5b62aec05130883f81541b2665126fd9bd31a415cc9fbe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:19:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc57ddab147121621d9d92cf6ad239c173c97d9b0ea2358bf4cb8f8a39023e61"}
{"level":"info","ts":"2026-07-07T16:19:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7d4d1247164c844ad5b62aec05130883f81541b2665126fd9bd31a415cc9fbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:19:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1d6a84189166f94e0da496e219bbdd1195f6f4cb40c1596688c9959e9ce078e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:19:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:19:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:19:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7d4d1247164c844ad5b62aec05130883f81541b2665126fd9bd31a415cc9fbe"}
{"level":"info","ts":"2026-07-07T16:19:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1d6a84189166f94e0da496e219bbdd1195f6f4cb40c1596688c9959e9ce078e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:19:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0762d439f2b7af197178e48af58ec040bb033c44470a73948a06fd800eb60496","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:19:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:19:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0762d439f2b7af197178e48af58ec040bb033c44470a73948a06fd800eb60496"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:19:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0762d439f2b7af197178e48af58ec040bb033c44470a73948a06fd800eb60496","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:19:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc57ddab147121621d9d92cf6ad239c173c97d9b0ea2358bf4cb8f8a39023e61","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:19:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7d4d1247164c844ad5b62aec05130883f81541b2665126fd9bd31a415cc9fbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:19:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1d6a84189166f94e0da496e219bbdd1195f6f4cb40c1596688c9959e9ce078e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:19:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:19:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:19:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1d6a84189166f94e0da496e219bbdd1195f6f4cb40c1596688c9959e9ce078e"}
{"level":"info","ts":"2026-07-07T16:19:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1d6a84189166f94e0da496e219bbdd1195f6f4cb40c1596688c9959e9ce078e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:19:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0762d439f2b7af197178e48af58ec040bb033c44470a73948a06fd800eb60496","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:19:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:19:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:19:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0762d439f2b7af197178e48af58ec040bb033c44470a73948a06fd800eb60496"}
{"level":"info","ts":"2026-07-07T16:19:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0762d439f2b7af197178e48af58ec040bb033c44470a73948a06fd800eb60496","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:19:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1d6a84189166f94e0da496e219bbdd1195f6f4cb40c1596688c9959e9ce078e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:19:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:19:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c1d6a84189166f94e0da496e219bbdd1195f6f4cb40c1596688c9959e9ce078e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:19:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc57ddab147121621d9d92cf6ad239c173c97d9b0ea2358bf4cb8f8a39023e61"}
{"level":"info","ts":"2026-07-07T16:19:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1d6a84189166f94e0da496e219bbdd1195f6f4cb40c1596688c9959e9ce078e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:19:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"648fe1d00f954f3ab245b9c924fd64472c8ee95a11a614c2d6d79ff1e2474f40","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:19:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:19:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:19:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7d4d1247164c844ad5b62aec05130883f81541b2665126fd9bd31a415cc9fbe"}
{"level":"info","ts":"2026-07-07T16:19:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"648fe1d00f954f3ab245b9c924fd64472c8ee95a11a614c2d6d79ff1e2474f40","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:19:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0762d439f2b7af197178e48af58ec040bb033c44470a73948a06fd800eb60496","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:19:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:19:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0762d439f2b7af197178e48af58ec040bb033c44470a73948a06fd800eb60496"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:19:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0762d439f2b7af197178e48af58ec040bb033c44470a73948a06fd800eb60496","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:19:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1d6a84189166f94e0da496e219bbdd1195f6f4cb40c1596688c9959e9ce078e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:19:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:19:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:19:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1d6a84189166f94e0da496e219bbdd1195f6f4cb40c1596688c9959e9ce078e"}
{"level":"info","ts":"2026-07-07T16:19:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1d6a84189166f94e0da496e219bbdd1195f6f4cb40c1596688c9959e9ce078e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:19:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"648fe1d00f954f3ab245b9c924fd64472c8ee95a11a614c2d6d79ff1e2474f40","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:19:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:19:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:19:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/648fe1d00f954f3ab245b9c924fd64472c8ee95a11a614c2d6d79ff1e2474f40"}
{"level":"info","ts":"2026-07-07T16:19:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0762d439f2b7af197178e48af58ec040bb033c44470a73948a06fd800eb60496"}
{"level":"info","ts":"2026-07-07T16:19:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"648fe1d00f954f3ab245b9c924fd64472c8ee95a11a614c2d6d79ff1e2474f40","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:19:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0762d439f2b7af197178e48af58ec040bb033c44470a73948a06fd800eb60496","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:19:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1d6a84189166f94e0da496e219bbdd1195f6f4cb40c1596688c9959e9ce078e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:19:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea36b2dd57bc5ce5a2c7734ffa446e10fa2b9945dfd70da2a0b015b8449ee30c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:19:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:19:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:19:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1d6a84189166f94e0da496e219bbdd1195f6f4cb40c1596688c9959e9ce078e"}
{"level":"info","ts":"2026-07-07T16:19:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea36b2dd57bc5ce5a2c7734ffa446e10fa2b9945dfd70da2a0b015b8449ee30c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:19:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"648fe1d00f954f3ab245b9c924fd64472c8ee95a11a614c2d6d79ff1e2474f40","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:19:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:19:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["648fe1d00f954f3ab245b9c924fd64472c8ee95a11a614c2d6d79ff1e2474f40"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:19:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"648fe1d00f954f3ab245b9c924fd64472c8ee95a11a614c2d6d79ff1e2474f40","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:19:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1d6a84189166f94e0da496e219bbdd1195f6f4cb40c1596688c9959e9ce078e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:19:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:19:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c1d6a84189166f94e0da496e219bbdd1195f6f4cb40c1596688c9959e9ce078e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:19:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea36b2dd57bc5ce5a2c7734ffa446e10fa2b9945dfd70da2a0b015b8449ee30c"}
{"level":"info","ts":"2026-07-07T16:19:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1d6a84189166f94e0da496e219bbdd1195f6f4cb40c1596688c9959e9ce078e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:19:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea36b2dd57bc5ce5a2c7734ffa446e10fa2b9945dfd70da2a0b015b8449ee30c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:19:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:19:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea36b2dd57bc5ce5a2c7734ffa446e10fa2b9945dfd70da2a0b015b8449ee30c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:19:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/648fe1d00f954f3ab245b9c924fd64472c8ee95a11a614c2d6d79ff1e2474f40"}
{"level":"info","ts":"2026-07-07T16:19:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea36b2dd57bc5ce5a2c7734ffa446e10fa2b9945dfd70da2a0b015b8449ee30c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:19:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"648fe1d00f954f3ab245b9c924fd64472c8ee95a11a614c2d6d79ff1e2474f40","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:19:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1d6a84189166f94e0da496e219bbdd1195f6f4cb40c1596688c9959e9ce078e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:19:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea36b2dd57bc5ce5a2c7734ffa446e10fa2b9945dfd70da2a0b015b8449ee30c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:19:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:19:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:19:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea36b2dd57bc5ce5a2c7734ffa446e10fa2b9945dfd70da2a0b015b8449ee30c"}
{"level":"info","ts":"2026-07-07T16:19:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea36b2dd57bc5ce5a2c7734ffa446e10fa2b9945dfd70da2a0b015b8449ee30c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:19:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea36b2dd57bc5ce5a2c7734ffa446e10fa2b9945dfd70da2a0b015b8449ee30c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:19:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:19:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea36b2dd57bc5ce5a2c7734ffa446e10fa2b9945dfd70da2a0b015b8449ee30c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:19:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea36b2dd57bc5ce5a2c7734ffa446e10fa2b9945dfd70da2a0b015b8449ee30c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:19:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea36b2dd57bc5ce5a2c7734ffa446e10fa2b9945dfd70da2a0b015b8449ee30c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:19:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:19:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea36b2dd57bc5ce5a2c7734ffa446e10fa2b9945dfd70da2a0b015b8449ee30c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T16:19:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ea36b2dd57bc5ce5a2c7734ffa446e10fa2b9945dfd70da2a0b015b8449ee30c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ea36b2dd57bc5ce5a2c7734ffa446e10fa2b9945dfd70da2a0b015b8449ee30c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T16:19:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea36b2dd57bc5ce5a2c7734ffa446e10fa2b9945dfd70da2a0b015b8449ee30c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:19:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea36b2dd57bc5ce5a2c7734ffa446e10fa2b9945dfd70da2a0b015b8449ee30c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:19:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1d6a84189166f94e0da496e219bbdd1195f6f4cb40c1596688c9959e9ce078e"}
{"level":"info","ts":"2026-07-07T16:19:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea36b2dd57bc5ce5a2c7734ffa446e10fa2b9945dfd70da2a0b015b8449ee30c"}
{"level":"debug","ts":"2026-07-07T16:19:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1d926338e14cb4e3c88376722c2a245047cf0aa3b4a9cfbdffe2cf1f59f999e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:19:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:19:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:19:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1d926338e14cb4e3c88376722c2a245047cf0aa3b4a9cfbdffe2cf1f59f999e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:19:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1d926338e14cb4e3c88376722c2a245047cf0aa3b4a9cfbdffe2cf1f59f999e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:19:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:19:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:19:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1d926338e14cb4e3c88376722c2a245047cf0aa3b4a9cfbdffe2cf1f59f999e"}
{"level":"info","ts":"2026-07-07T16:19:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1d926338e14cb4e3c88376722c2a245047cf0aa3b4a9cfbdffe2cf1f59f999e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:19:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1d926338e14cb4e3c88376722c2a245047cf0aa3b4a9cfbdffe2cf1f59f999e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:19:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:19:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:19:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1d926338e14cb4e3c88376722c2a245047cf0aa3b4a9cfbdffe2cf1f59f999e"}
{"level":"error","ts":"2026-07-07T16:19:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e1d926338e14cb4e3c88376722c2a245047cf0aa3b4a9cfbdffe2cf1f59f999e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e1d926338e14cb4e3c88376722c2a245047cf0aa3b4a9cfbdffe2cf1f59f999e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T16:19:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1d926338e14cb4e3c88376722c2a245047cf0aa3b4a9cfbdffe2cf1f59f999e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:19:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1d926338e14cb4e3c88376722c2a245047cf0aa3b4a9cfbdffe2cf1f59f999e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:19:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1d926338e14cb4e3c88376722c2a245047cf0aa3b4a9cfbdffe2cf1f59f999e"}
{"level":"debug","ts":"2026-07-07T16:19:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1d926338e14cb4e3c88376722c2a245047cf0aa3b4a9cfbdffe2cf1f59f999e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:19:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:19:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1d926338e14cb4e3c88376722c2a245047cf0aa3b4a9cfbdffe2cf1f59f999e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:19:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1d926338e14cb4e3c88376722c2a245047cf0aa3b4a9cfbdffe2cf1f59f999e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:19:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1d926338e14cb4e3c88376722c2a245047cf0aa3b4a9cfbdffe2cf1f59f999e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:19:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1d926338e14cb4e3c88376722c2a245047cf0aa3b4a9cfbdffe2cf1f59f999e"}
{"level":"debug","ts":"2026-07-07T16:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d62d32dbb011d2f7c6b27c2258eecc11171224936b8d6533e787a9c6adb11e8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:19:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:19:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d62d32dbb011d2f7c6b27c2258eecc11171224936b8d6533e787a9c6adb11e8f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d62d32dbb011d2f7c6b27c2258eecc11171224936b8d6533e787a9c6adb11e8f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d62d32dbb011d2f7c6b27c2258eecc11171224936b8d6533e787a9c6adb11e8f"}
{"level":"debug","ts":"2026-07-07T16:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d62d32dbb011d2f7c6b27c2258eecc11171224936b8d6533e787a9c6adb11e8f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d62d32dbb011d2f7c6b27c2258eecc11171224936b8d6533e787a9c6adb11e8f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d62d32dbb011d2f7c6b27c2258eecc11171224936b8d6533e787a9c6adb11e8f"}
{"level":"debug","ts":"2026-07-07T16:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d62d32dbb011d2f7c6b27c2258eecc11171224936b8d6533e787a9c6adb11e8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:19:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:19:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d62d32dbb011d2f7c6b27c2258eecc11171224936b8d6533e787a9c6adb11e8f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d62d32dbb011d2f7c6b27c2258eecc11171224936b8d6533e787a9c6adb11e8f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d62d32dbb011d2f7c6b27c2258eecc11171224936b8d6533e787a9c6adb11e8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:19:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:19:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d62d32dbb011d2f7c6b27c2258eecc11171224936b8d6533e787a9c6adb11e8f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d62d32dbb011d2f7c6b27c2258eecc11171224936b8d6533e787a9c6adb11e8f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d62d32dbb011d2f7c6b27c2258eecc11171224936b8d6533e787a9c6adb11e8f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d62d32dbb011d2f7c6b27c2258eecc11171224936b8d6533e787a9c6adb11e8f"}
{"level":"debug","ts":"2026-07-07T16:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d62d32dbb011d2f7c6b27c2258eecc11171224936b8d6533e787a9c6adb11e8f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d62d32dbb011d2f7c6b27c2258eecc11171224936b8d6533e787a9c6adb11e8f"}
{"level":"debug","ts":"2026-07-07T16:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d62d32dbb011d2f7c6b27c2258eecc11171224936b8d6533e787a9c6adb11e8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:19:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:19:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d62d32dbb011d2f7c6b27c2258eecc11171224936b8d6533e787a9c6adb11e8f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:19:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d62d32dbb011d2f7c6b27c2258eecc11171224936b8d6533e787a9c6adb11e8f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d62d32dbb011d2f7c6b27c2258eecc11171224936b8d6533e787a9c6adb11e8f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d62d32dbb011d2f7c6b27c2258eecc11171224936b8d6533e787a9c6adb11e8f"}
{"level":"debug","ts":"2026-07-07T16:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea36b2dd57bc5ce5a2c7734ffa446e10fa2b9945dfd70da2a0b015b8449ee30c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea36b2dd57bc5ce5a2c7734ffa446e10fa2b9945dfd70da2a0b015b8449ee30c"}
{"level":"debug","ts":"2026-07-07T16:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1d926338e14cb4e3c88376722c2a245047cf0aa3b4a9cfbdffe2cf1f59f999e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:19:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:19:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1d926338e14cb4e3c88376722c2a245047cf0aa3b4a9cfbdffe2cf1f59f999e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1d926338e14cb4e3c88376722c2a245047cf0aa3b4a9cfbdffe2cf1f59f999e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1d926338e14cb4e3c88376722c2a245047cf0aa3b4a9cfbdffe2cf1f59f999e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1d926338e14cb4e3c88376722c2a245047cf0aa3b4a9cfbdffe2cf1f59f999e"}
{"level":"debug","ts":"2026-07-07T16:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1d926338e14cb4e3c88376722c2a245047cf0aa3b4a9cfbdffe2cf1f59f999e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1d926338e14cb4e3c88376722c2a245047cf0aa3b4a9cfbdffe2cf1f59f999e"}
{"level":"debug","ts":"2026-07-07T16:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1d926338e14cb4e3c88376722c2a245047cf0aa3b4a9cfbdffe2cf1f59f999e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:19:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:19:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1d926338e14cb4e3c88376722c2a245047cf0aa3b4a9cfbdffe2cf1f59f999e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1d926338e14cb4e3c88376722c2a245047cf0aa3b4a9cfbdffe2cf1f59f999e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"648fe1d00f954f3ab245b9c924fd64472c8ee95a11a614c2d6d79ff1e2474f40","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:19:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:19:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"648fe1d00f954f3ab245b9c924fd64472c8ee95a11a614c2d6d79ff1e2474f40","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1d926338e14cb4e3c88376722c2a245047cf0aa3b4a9cfbdffe2cf1f59f999e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"648fe1d00f954f3ab245b9c924fd64472c8ee95a11a614c2d6d79ff1e2474f40","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"648fe1d00f954f3ab245b9c924fd64472c8ee95a11a614c2d6d79ff1e2474f40","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/648fe1d00f954f3ab245b9c924fd64472c8ee95a11a614c2d6d79ff1e2474f40"}
{"level":"debug","ts":"2026-07-07T16:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"648fe1d00f954f3ab245b9c924fd64472c8ee95a11a614c2d6d79ff1e2474f40","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:19:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:19:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["648fe1d00f954f3ab245b9c924fd64472c8ee95a11a614c2d6d79ff1e2474f40"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1d926338e14cb4e3c88376722c2a245047cf0aa3b4a9cfbdffe2cf1f59f999e"}
{"level":"info","ts":"2026-07-07T16:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"648fe1d00f954f3ab245b9c924fd64472c8ee95a11a614c2d6d79ff1e2474f40","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"648fe1d00f954f3ab245b9c924fd64472c8ee95a11a614c2d6d79ff1e2474f40","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:19:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:19:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/648fe1d00f954f3ab245b9c924fd64472c8ee95a11a614c2d6d79ff1e2474f40"}
{"level":"info","ts":"2026-07-07T16:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"648fe1d00f954f3ab245b9c924fd64472c8ee95a11a614c2d6d79ff1e2474f40","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"648fe1d00f954f3ab245b9c924fd64472c8ee95a11a614c2d6d79ff1e2474f40","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"648fe1d00f954f3ab245b9c924fd64472c8ee95a11a614c2d6d79ff1e2474f40","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/648fe1d00f954f3ab245b9c924fd64472c8ee95a11a614c2d6d79ff1e2474f40"}
{"level":"debug","ts":"2026-07-07T16:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"648fe1d00f954f3ab245b9c924fd64472c8ee95a11a614c2d6d79ff1e2474f40","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f9da72e13071f20745699022a6f5f4003f80e448459952440117999da1dfa69d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/648fe1d00f954f3ab245b9c924fd64472c8ee95a11a614c2d6d79ff1e2474f40"}
{"level":"info","ts":"2026-07-07T16:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9da72e13071f20745699022a6f5f4003f80e448459952440117999da1dfa69d"}
{"level":"debug","ts":"2026-07-07T16:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"648fe1d00f954f3ab245b9c924fd64472c8ee95a11a614c2d6d79ff1e2474f40","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:19:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:19:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["648fe1d00f954f3ab245b9c924fd64472c8ee95a11a614c2d6d79ff1e2474f40"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"648fe1d00f954f3ab245b9c924fd64472c8ee95a11a614c2d6d79ff1e2474f40","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"648fe1d00f954f3ab245b9c924fd64472c8ee95a11a614c2d6d79ff1e2474f40","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:19:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:19:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"648fe1d00f954f3ab245b9c924fd64472c8ee95a11a614c2d6d79ff1e2474f40","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"648fe1d00f954f3ab245b9c924fd64472c8ee95a11a614c2d6d79ff1e2474f40","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/648fe1d00f954f3ab245b9c924fd64472c8ee95a11a614c2d6d79ff1e2474f40"}
{"level":"debug","ts":"2026-07-07T16:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"648fe1d00f954f3ab245b9c924fd64472c8ee95a11a614c2d6d79ff1e2474f40","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"82bac9eab702e4c9a7c5153ab2c125a4404481d523909aeb4dd212b254730015","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/648fe1d00f954f3ab245b9c924fd64472c8ee95a11a614c2d6d79ff1e2474f40"}
{"level":"debug","ts":"2026-07-07T16:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"648fe1d00f954f3ab245b9c924fd64472c8ee95a11a614c2d6d79ff1e2474f40","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:19:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:19:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["648fe1d00f954f3ab245b9c924fd64472c8ee95a11a614c2d6d79ff1e2474f40"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"648fe1d00f954f3ab245b9c924fd64472c8ee95a11a614c2d6d79ff1e2474f40","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"648fe1d00f954f3ab245b9c924fd64472c8ee95a11a614c2d6d79ff1e2474f40","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82bac9eab702e4c9a7c5153ab2c125a4404481d523909aeb4dd212b254730015"}
{"level":"info","ts":"2026-07-07T16:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/648fe1d00f954f3ab245b9c924fd64472c8ee95a11a614c2d6d79ff1e2474f40"}
{"level":"debug","ts":"2026-07-07T16:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69a1a5d8a46d08d48ab14f308f3b3c272ee0b7c92a040be9991a1feb782aa98f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:19:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:19:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69a1a5d8a46d08d48ab14f308f3b3c272ee0b7c92a040be9991a1feb782aa98f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69a1a5d8a46d08d48ab14f308f3b3c272ee0b7c92a040be9991a1feb782aa98f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69a1a5d8a46d08d48ab14f308f3b3c272ee0b7c92a040be9991a1feb782aa98f"}
{"level":"debug","ts":"2026-07-07T16:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69a1a5d8a46d08d48ab14f308f3b3c272ee0b7c92a040be9991a1feb782aa98f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69a1a5d8a46d08d48ab14f308f3b3c272ee0b7c92a040be9991a1feb782aa98f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69a1a5d8a46d08d48ab14f308f3b3c272ee0b7c92a040be9991a1feb782aa98f"}
{"level":"debug","ts":"2026-07-07T16:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69a1a5d8a46d08d48ab14f308f3b3c272ee0b7c92a040be9991a1feb782aa98f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:19:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:19:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["69a1a5d8a46d08d48ab14f308f3b3c272ee0b7c92a040be9991a1feb782aa98f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69a1a5d8a46d08d48ab14f308f3b3c272ee0b7c92a040be9991a1feb782aa98f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69a1a5d8a46d08d48ab14f308f3b3c272ee0b7c92a040be9991a1feb782aa98f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:19:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:19:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69a1a5d8a46d08d48ab14f308f3b3c272ee0b7c92a040be9991a1feb782aa98f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0762d439f2b7af197178e48af58ec040bb033c44470a73948a06fd800eb60496","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69a1a5d8a46d08d48ab14f308f3b3c272ee0b7c92a040be9991a1feb782aa98f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69a1a5d8a46d08d48ab14f308f3b3c272ee0b7c92a040be9991a1feb782aa98f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69a1a5d8a46d08d48ab14f308f3b3c272ee0b7c92a040be9991a1feb782aa98f"}
{"level":"debug","ts":"2026-07-07T16:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69a1a5d8a46d08d48ab14f308f3b3c272ee0b7c92a040be9991a1feb782aa98f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:19:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:19:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["69a1a5d8a46d08d48ab14f308f3b3c272ee0b7c92a040be9991a1feb782aa98f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0762d439f2b7af197178e48af58ec040bb033c44470a73948a06fd800eb60496"}
{"level":"info","ts":"2026-07-07T16:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69a1a5d8a46d08d48ab14f308f3b3c272ee0b7c92a040be9991a1feb782aa98f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69a1a5d8a46d08d48ab14f308f3b3c272ee0b7c92a040be9991a1feb782aa98f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:19:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:19:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69a1a5d8a46d08d48ab14f308f3b3c272ee0b7c92a040be9991a1feb782aa98f"}
{"level":"info","ts":"2026-07-07T16:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69a1a5d8a46d08d48ab14f308f3b3c272ee0b7c92a040be9991a1feb782aa98f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69a1a5d8a46d08d48ab14f308f3b3c272ee0b7c92a040be9991a1feb782aa98f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69a1a5d8a46d08d48ab14f308f3b3c272ee0b7c92a040be9991a1feb782aa98f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69a1a5d8a46d08d48ab14f308f3b3c272ee0b7c92a040be9991a1feb782aa98f"}
{"level":"debug","ts":"2026-07-07T16:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25720add6d568b4d76f17be6580d7469dec47397aaf86c831bbde5ba8d8ce402","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:19:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69a1a5d8a46d08d48ab14f308f3b3c272ee0b7c92a040be9991a1feb782aa98f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69a1a5d8a46d08d48ab14f308f3b3c272ee0b7c92a040be9991a1feb782aa98f"}
{"level":"info","ts":"2026-07-07T16:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25720add6d568b4d76f17be6580d7469dec47397aaf86c831bbde5ba8d8ce402"}
{"level":"debug","ts":"2026-07-07T16:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69a1a5d8a46d08d48ab14f308f3b3c272ee0b7c92a040be9991a1feb782aa98f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:19:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:19:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["69a1a5d8a46d08d48ab14f308f3b3c272ee0b7c92a040be9991a1feb782aa98f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69a1a5d8a46d08d48ab14f308f3b3c272ee0b7c92a040be9991a1feb782aa98f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69a1a5d8a46d08d48ab14f308f3b3c272ee0b7c92a040be9991a1feb782aa98f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:19:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:19:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69a1a5d8a46d08d48ab14f308f3b3c272ee0b7c92a040be9991a1feb782aa98f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69a1a5d8a46d08d48ab14f308f3b3c272ee0b7c92a040be9991a1feb782aa98f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69a1a5d8a46d08d48ab14f308f3b3c272ee0b7c92a040be9991a1feb782aa98f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69a1a5d8a46d08d48ab14f308f3b3c272ee0b7c92a040be9991a1feb782aa98f"}
{"level":"debug","ts":"2026-07-07T16:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"380947789ff0e315a586715e7976f579d3f4beb61f2aa5dbd5ee2135f141f8fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69a1a5d8a46d08d48ab14f308f3b3c272ee0b7c92a040be9991a1feb782aa98f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69a1a5d8a46d08d48ab14f308f3b3c272ee0b7c92a040be9991a1feb782aa98f"}
{"level":"debug","ts":"2026-07-07T16:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9063a7d42a12d017c0b4a075f7e4c8b78dd7cb3a6ee36f6b826051ef3e208148","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/380947789ff0e315a586715e7976f579d3f4beb61f2aa5dbd5ee2135f141f8fb"}
{"level":"debug","ts":"2026-07-07T16:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69a1a5d8a46d08d48ab14f308f3b3c272ee0b7c92a040be9991a1feb782aa98f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:19:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:19:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["69a1a5d8a46d08d48ab14f308f3b3c272ee0b7c92a040be9991a1feb782aa98f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69a1a5d8a46d08d48ab14f308f3b3c272ee0b7c92a040be9991a1feb782aa98f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69a1a5d8a46d08d48ab14f308f3b3c272ee0b7c92a040be9991a1feb782aa98f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9063a7d42a12d017c0b4a075f7e4c8b78dd7cb3a6ee36f6b826051ef3e208148"}
{"level":"info","ts":"2026-07-07T16:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69a1a5d8a46d08d48ab14f308f3b3c272ee0b7c92a040be9991a1feb782aa98f"}
{"level":"debug","ts":"2026-07-07T16:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7d4d1247164c844ad5b62aec05130883f81541b2665126fd9bd31a415cc9fbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:19:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:19:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7d4d1247164c844ad5b62aec05130883f81541b2665126fd9bd31a415cc9fbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7d4d1247164c844ad5b62aec05130883f81541b2665126fd9bd31a415cc9fbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7d4d1247164c844ad5b62aec05130883f81541b2665126fd9bd31a415cc9fbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b2ba7eb701a9c3a1ccda77cf264d45bc4b25926fd302e8e568e4a8d4a1d8bef","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7d4d1247164c844ad5b62aec05130883f81541b2665126fd9bd31a415cc9fbe"}
{"level":"debug","ts":"2026-07-07T16:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1d6a84189166f94e0da496e219bbdd1195f6f4cb40c1596688c9959e9ce078e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7d4d1247164c844ad5b62aec05130883f81541b2665126fd9bd31a415cc9fbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:19:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:19:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a7d4d1247164c844ad5b62aec05130883f81541b2665126fd9bd31a415cc9fbe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b2ba7eb701a9c3a1ccda77cf264d45bc4b25926fd302e8e568e4a8d4a1d8bef"}
{"level":"info","ts":"2026-07-07T16:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7d4d1247164c844ad5b62aec05130883f81541b2665126fd9bd31a415cc9fbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa9439c19319bc358b5861271ae9c5b13b5f6184ba86588d5cee5303919011c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7d4d1247164c844ad5b62aec05130883f81541b2665126fd9bd31a415cc9fbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:19:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:19:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7d4d1247164c844ad5b62aec05130883f81541b2665126fd9bd31a415cc9fbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7d4d1247164c844ad5b62aec05130883f81541b2665126fd9bd31a415cc9fbe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7d4d1247164c844ad5b62aec05130883f81541b2665126fd9bd31a415cc9fbe"}
{"level":"debug","ts":"2026-07-07T16:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7d4d1247164c844ad5b62aec05130883f81541b2665126fd9bd31a415cc9fbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:19:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:19:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a7d4d1247164c844ad5b62aec05130883f81541b2665126fd9bd31a415cc9fbe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7d4d1247164c844ad5b62aec05130883f81541b2665126fd9bd31a415cc9fbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a13f41ac1a044179bf5b80fadc3b0b5a45f2af79ed78dc089fae4e3efd9ffa3a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7d4d1247164c844ad5b62aec05130883f81541b2665126fd9bd31a415cc9fbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4def18ce8171737123b29aa55433ae160f308818d27fc4aa9d00be669c0cbffa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1d6a84189166f94e0da496e219bbdd1195f6f4cb40c1596688c9959e9ce078e"}
{"level":"info","ts":"2026-07-07T16:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa9439c19319bc358b5861271ae9c5b13b5f6184ba86588d5cee5303919011c7"}
{"level":"info","ts":"2026-07-07T16:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7d4d1247164c844ad5b62aec05130883f81541b2665126fd9bd31a415cc9fbe"}
{"level":"debug","ts":"2026-07-07T16:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b057fea29aab48a542ba72fba8a30a8759e13a0914bbb6f617f01f703c5fda83","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a13f41ac1a044179bf5b80fadc3b0b5a45f2af79ed78dc089fae4e3efd9ffa3a"}
{"level":"debug","ts":"2026-07-07T16:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc57ddab147121621d9d92cf6ad239c173c97d9b0ea2358bf4cb8f8a39023e61","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4def18ce8171737123b29aa55433ae160f308818d27fc4aa9d00be669c0cbffa"}
{"level":"debug","ts":"2026-07-07T16:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dfb11436010a6987c4c4935972ea62e2e861b125c3e91ff351784e3ba5c0b428","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b057fea29aab48a542ba72fba8a30a8759e13a0914bbb6f617f01f703c5fda83"}
{"level":"info","ts":"2026-07-07T16:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc57ddab147121621d9d92cf6ad239c173c97d9b0ea2358bf4cb8f8a39023e61"}
{"level":"info","ts":"2026-07-07T16:19:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dfb11436010a6987c4c4935972ea62e2e861b125c3e91ff351784e3ba5c0b428"}
{"level":"info","ts":"2026-07-07T16:19:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0e09eae6-dd43-4af5-a23a-9e2d74bf6bc7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:39894","PortSpecifier":{"PortValue":39894}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0e09eae6-dd43-4af5-a23a-9e2d74bf6bc7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-9ac19f.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:19:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0e09eae6-dd43-4af5-a23a-9e2d74bf6bc7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:39894","PortSpecifier":{"PortValue":39894}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783441171,"nanos":610333787},"http":{"id":"0e09eae6-dd43-4af5-a23a-9e2d74bf6bc7","method":"POST","headers":{":authority":"e2e-shared-a-9ac19f.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:19:31Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0e09eae6-dd43-4af5-a23a-9e2d74bf6bc7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T16:19:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0e09eae6-dd43-4af5-a23a-9e2d74bf6bc7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f6a73c6c-303e-47e7-8a1a-2f23fec1b49d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2222897e-adbc-4372-aada-e7cf61fcb2a7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/13545484d307"]}}
{"level":"debug","ts":"2026-07-07T16:19:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0e09eae6-dd43-4af5-a23a-9e2d74bf6bc7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/13545484d307"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2222897e-adbc-4372-aada-e7cf61fcb2a7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f6a73c6c-303e-47e7-8a1a-2f23fec1b49d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d62d32dbb011d2f7c6b27c2258eecc11171224936b8d6533e787a9c6adb11e8f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-9ac19f.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:19:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e09eae6-dd43-4af5-a23a-9e2d74bf6bc7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:19:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e09eae6-dd43-4af5-a23a-9e2d74bf6bc7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:19:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e09eae6-dd43-4af5-a23a-9e2d74bf6bc7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9ac19f/sub-test-model-9ac19f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:19:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0e09eae6-dd43-4af5-a23a-9e2d74bf6bc7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T16:19:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0e09eae6-dd43-4af5-a23a-9e2d74bf6bc7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T16:19:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0e09eae6-dd43-4af5-a23a-9e2d74bf6bc7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T16:19:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0e09eae6-dd43-4af5-a23a-9e2d74bf6bc7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:19:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0e09eae6-dd43-4af5-a23a-9e2d74bf6bc7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:19:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e1638afb-e239-4eb5-9179-30f9c9ea7068","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:40308","PortSpecifier":{"PortValue":40308}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e1638afb-e239-4eb5-9179-30f9c9ea7068","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-132358.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:19:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e1638afb-e239-4eb5-9179-30f9c9ea7068","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:40308","PortSpecifier":{"PortValue":40308}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783441171,"nanos":656558901},"http":{"id":"e1638afb-e239-4eb5-9179-30f9c9ea7068","method":"POST","headers":{":authority":"e2e-shared-b-132358.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:19:31Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e1638afb-e239-4eb5-9179-30f9c9ea7068","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T16:19:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e1638afb-e239-4eb5-9179-30f9c9ea7068","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f6a73c6c-303e-47e7-8a1a-2f23fec1b49d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2222897e-adbc-4372-aada-e7cf61fcb2a7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/13545484d307"]}}
{"level":"debug","ts":"2026-07-07T16:19:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e1638afb-e239-4eb5-9179-30f9c9ea7068","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/13545484d307"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2222897e-adbc-4372-aada-e7cf61fcb2a7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f6a73c6c-303e-47e7-8a1a-2f23fec1b49d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b057fea29aab48a542ba72fba8a30a8759e13a0914bbb6f617f01f703c5fda83"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-132358.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:19:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e1638afb-e239-4eb5-9179-30f9c9ea7068","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:19:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e1638afb-e239-4eb5-9179-30f9c9ea7068","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:19:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e1638afb-e239-4eb5-9179-30f9c9ea7068","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-132358/sub-test-model-132358\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:19:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e1638afb-e239-4eb5-9179-30f9c9ea7068","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T16:19:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e1638afb-e239-4eb5-9179-30f9c9ea7068","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T16:19:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e1638afb-e239-4eb5-9179-30f9c9ea7068","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T16:19:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e1638afb-e239-4eb5-9179-30f9c9ea7068","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:19:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e1638afb-e239-4eb5-9179-30f9c9ea7068","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:19:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ae3678c6-d896-446f-9bc3-a180796012d1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:39904","PortSpecifier":{"PortValue":39904}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ae3678c6-d896-446f-9bc3-a180796012d1","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-9ac19f.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:19:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ae3678c6-d896-446f-9bc3-a180796012d1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:39904","PortSpecifier":{"PortValue":39904}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783441171,"nanos":701637506},"http":{"id":"ae3678c6-d896-446f-9bc3-a180796012d1","method":"GET","headers":{":authority":"e2e-shared-a-9ac19f.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:19:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ae3678c6-d896-446f-9bc3-a180796012d1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-wzbXYrdURl5KuUok_Abv7Td8MUg9uFckwIWBhWofFuEKxG3NfTHefw39v64x"}
{"level":"debug","ts":"2026-07-07T16:19:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ae3678c6-d896-446f-9bc3-a180796012d1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9ac19f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-wzbXYrdURl5KuUok_Abv7Td8MUg9uFckwIWBhWofFuEKxG3NfTHefw39v64x\"}"}
{"level":"debug","ts":"2026-07-07T16:19:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ae3678c6-d896-446f-9bc3-a180796012d1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9ac19f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"2c95b4b6-3cb0-4b12-8947-a29d9a9d5c29","keyName":"e2e-sub-iso-e2b5e9","subscription":"e2e-a-only-285335","tenant":"e2e-shared-a-9ac19f","userId":"2c95b4b6-3cb0-4b12-8947-a29d9a9d5c29","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T16:19:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ae3678c6-d896-446f-9bc3-a180796012d1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:19:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae3678c6-d896-446f-9bc3-a180796012d1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:19:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae3678c6-d896-446f-9bc3-a180796012d1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:19:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae3678c6-d896-446f-9bc3-a180796012d1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9ac19f/sub-test-model-9ac19f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:19:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ae3678c6-d896-446f-9bc3-a180796012d1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:19:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ae3678c6-d896-446f-9bc3-a180796012d1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-07T16:19:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ae3678c6-d896-446f-9bc3-a180796012d1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-285335"}
{"level":"debug","ts":"2026-07-07T16:19:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ae3678c6-d896-446f-9bc3-a180796012d1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T16:19:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ae3678c6-d896-446f-9bc3-a180796012d1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:19:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ae3678c6-d896-446f-9bc3-a180796012d1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:19:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6a300852-0cd0-4720-8108-004bcafba271","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:40312","PortSpecifier":{"PortValue":40312}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6a300852-0cd0-4720-8108-004bcafba271","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-132358.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:19:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6a300852-0cd0-4720-8108-004bcafba271","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:40312","PortSpecifier":{"PortValue":40312}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783441171,"nanos":743512689},"http":{"id":"6a300852-0cd0-4720-8108-004bcafba271","method":"GET","headers":{":authority":"e2e-shared-b-132358.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:19:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6a300852-0cd0-4720-8108-004bcafba271","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-wcYh5tBfGKOc9he8_vvvPcDCabLvPYwkBPlIbwDDEN8gk6X7ieICCuMwtrvp"}
{"level":"debug","ts":"2026-07-07T16:19:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6a300852-0cd0-4720-8108-004bcafba271","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-132358.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-wcYh5tBfGKOc9he8_vvvPcDCabLvPYwkBPlIbwDDEN8gk6X7ieICCuMwtrvp\"}"}
{"level":"debug","ts":"2026-07-07T16:19:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6a300852-0cd0-4720-8108-004bcafba271","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-132358.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d44c1199-8292-4fbe-9567-88f56023705d","keyName":"e2e-sub-iso-9f749d","subscription":"e2e-b-only-285335","tenant":"e2e-shared-b-132358","userId":"d44c1199-8292-4fbe-9567-88f56023705d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T16:19:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6a300852-0cd0-4720-8108-004bcafba271","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:19:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a300852-0cd0-4720-8108-004bcafba271","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:19:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a300852-0cd0-4720-8108-004bcafba271","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:19:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a300852-0cd0-4720-8108-004bcafba271","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-132358/sub-test-model-132358\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:19:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a300852-0cd0-4720-8108-004bcafba271","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:19:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6a300852-0cd0-4720-8108-004bcafba271","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-07T16:19:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a300852-0cd0-4720-8108-004bcafba271","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T16:19:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a300852-0cd0-4720-8108-004bcafba271","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-285335"}
{"level":"info","ts":"2026-07-07T16:19:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6a300852-0cd0-4720-8108-004bcafba271","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:19:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6a300852-0cd0-4720-8108-004bcafba271","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:19:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"27dafaf4-ab6d-44f4-baa9-e6956c61bc3e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:52918","PortSpecifier":{"PortValue":52918}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"27dafaf4-ab6d-44f4-baa9-e6956c61bc3e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-9ac19f.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:19:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"27dafaf4-ab6d-44f4-baa9-e6956c61bc3e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:52918","PortSpecifier":{"PortValue":52918}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783441179,"nanos":717303017},"http":{"id":"27dafaf4-ab6d-44f4-baa9-e6956c61bc3e","method":"POST","headers":{":authority":"e2e-shared-a-9ac19f.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:19:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"27dafaf4-ab6d-44f4-baa9-e6956c61bc3e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T16:19:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"27dafaf4-ab6d-44f4-baa9-e6956c61bc3e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f6a73c6c-303e-47e7-8a1a-2f23fec1b49d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2222897e-adbc-4372-aada-e7cf61fcb2a7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/13545484d307"]}}
{"level":"debug","ts":"2026-07-07T16:19:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"27dafaf4-ab6d-44f4-baa9-e6956c61bc3e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/13545484d307"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2222897e-adbc-4372-aada-e7cf61fcb2a7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f6a73c6c-303e-47e7-8a1a-2f23fec1b49d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d62d32dbb011d2f7c6b27c2258eecc11171224936b8d6533e787a9c6adb11e8f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-9ac19f.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:19:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27dafaf4-ab6d-44f4-baa9-e6956c61bc3e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:19:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27dafaf4-ab6d-44f4-baa9-e6956c61bc3e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:19:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27dafaf4-ab6d-44f4-baa9-e6956c61bc3e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9ac19f/sub-test-model-9ac19f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:19:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"27dafaf4-ab6d-44f4-baa9-e6956c61bc3e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T16:19:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"27dafaf4-ab6d-44f4-baa9-e6956c61bc3e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T16:19:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"27dafaf4-ab6d-44f4-baa9-e6956c61bc3e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T16:19:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"27dafaf4-ab6d-44f4-baa9-e6956c61bc3e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:19:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"27dafaf4-ab6d-44f4-baa9-e6956c61bc3e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:19:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f65c9b01-9e82-46ab-a091-ee3a63142d54","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:36476","PortSpecifier":{"PortValue":36476}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f65c9b01-9e82-46ab-a091-ee3a63142d54","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-132358.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:19:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f65c9b01-9e82-46ab-a091-ee3a63142d54","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:36476","PortSpecifier":{"PortValue":36476}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783441179,"nanos":754778411},"http":{"id":"f65c9b01-9e82-46ab-a091-ee3a63142d54","method":"POST","headers":{":authority":"e2e-shared-b-132358.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:19:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f65c9b01-9e82-46ab-a091-ee3a63142d54","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T16:19:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f65c9b01-9e82-46ab-a091-ee3a63142d54","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f6a73c6c-303e-47e7-8a1a-2f23fec1b49d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2222897e-adbc-4372-aada-e7cf61fcb2a7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/13545484d307"]}}
{"level":"debug","ts":"2026-07-07T16:19:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f65c9b01-9e82-46ab-a091-ee3a63142d54","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/13545484d307"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2222897e-adbc-4372-aada-e7cf61fcb2a7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f6a73c6c-303e-47e7-8a1a-2f23fec1b49d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b057fea29aab48a542ba72fba8a30a8759e13a0914bbb6f617f01f703c5fda83"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-132358.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:19:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f65c9b01-9e82-46ab-a091-ee3a63142d54","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:19:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f65c9b01-9e82-46ab-a091-ee3a63142d54","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:19:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f65c9b01-9e82-46ab-a091-ee3a63142d54","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-132358/sub-test-model-132358\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:19:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f65c9b01-9e82-46ab-a091-ee3a63142d54","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T16:19:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f65c9b01-9e82-46ab-a091-ee3a63142d54","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:19:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f65c9b01-9e82-46ab-a091-ee3a63142d54","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T16:19:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f65c9b01-9e82-46ab-a091-ee3a63142d54","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:19:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f65c9b01-9e82-46ab-a091-ee3a63142d54","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:19:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"36d3d144-f7aa-41d9-9c93-1da3dc61415d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:52934","PortSpecifier":{"PortValue":52934}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"36d3d144-f7aa-41d9-9c93-1da3dc61415d","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-9ac19f.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:19:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"36d3d144-f7aa-41d9-9c93-1da3dc61415d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:52934","PortSpecifier":{"PortValue":52934}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783441179,"nanos":793235181},"http":{"id":"36d3d144-f7aa-41d9-9c93-1da3dc61415d","method":"POST","headers":{":authority":"e2e-shared-a-9ac19f.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:19:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"36d3d144-f7aa-41d9-9c93-1da3dc61415d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-UVPIaw41ZBwI7a2C_aMSh7s0gYEQGUjpyiVG84qfUs5Co5d4zl4vzD8b0L1v"}
{"level":"debug","ts":"2026-07-07T16:19:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"36d3d144-f7aa-41d9-9c93-1da3dc61415d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9ac19f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-UVPIaw41ZBwI7a2C_aMSh7s0gYEQGUjpyiVG84qfUs5Co5d4zl4vzD8b0L1v\"}"}
{"level":"debug","ts":"2026-07-07T16:19:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"36d3d144-f7aa-41d9-9c93-1da3dc61415d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9ac19f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3b3060f6-6bb0-4ab9-8ab8-38f72b30b0d7","keyName":"e2e-sub-iso-aeda6a","subscription":"e2e-shared-sub-f44e24","tenant":"e2e-shared-a-9ac19f","userId":"3b3060f6-6bb0-4ab9-8ab8-38f72b30b0d7","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T16:19:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"36d3d144-f7aa-41d9-9c93-1da3dc61415d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:19:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"36d3d144-f7aa-41d9-9c93-1da3dc61415d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:19:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"36d3d144-f7aa-41d9-9c93-1da3dc61415d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:19:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"36d3d144-f7aa-41d9-9c93-1da3dc61415d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9ac19f/sub-test-model-9ac19f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:19:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"36d3d144-f7aa-41d9-9c93-1da3dc61415d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T16:19:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"36d3d144-f7aa-41d9-9c93-1da3dc61415d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:19:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"36d3d144-f7aa-41d9-9c93-1da3dc61415d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-07T16:19:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"36d3d144-f7aa-41d9-9c93-1da3dc61415d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-f44e24"}
{"level":"info","ts":"2026-07-07T16:19:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"36d3d144-f7aa-41d9-9c93-1da3dc61415d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:19:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"36d3d144-f7aa-41d9-9c93-1da3dc61415d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:19:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"78f8cc1a-3655-443d-b70d-fd81e123d8d3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:36484","PortSpecifier":{"PortValue":36484}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"78f8cc1a-3655-443d-b70d-fd81e123d8d3","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-132358.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:19:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"78f8cc1a-3655-443d-b70d-fd81e123d8d3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:36484","PortSpecifier":{"PortValue":36484}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783441179,"nanos":825907083},"http":{"id":"78f8cc1a-3655-443d-b70d-fd81e123d8d3","method":"POST","headers":{":authority":"e2e-shared-b-132358.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:19:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"78f8cc1a-3655-443d-b70d-fd81e123d8d3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1LAfKuZ3dbdJDfIXJ_ZRrDWee24x0IhsO70hQEICMDt5euncZf2QAoSp2tUgt"}
{"level":"debug","ts":"2026-07-07T16:19:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"78f8cc1a-3655-443d-b70d-fd81e123d8d3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-132358.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1LAfKuZ3dbdJDfIXJ_ZRrDWee24x0IhsO70hQEICMDt5euncZf2QAoSp2tUgt\"}"}
{"level":"debug","ts":"2026-07-07T16:19:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"78f8cc1a-3655-443d-b70d-fd81e123d8d3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-132358.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d9e21d07-3de6-49cd-9e36-cd97931ea51a","keyName":"e2e-sub-iso-27aa99","subscription":"e2e-shared-sub-f44e24","tenant":"e2e-shared-b-132358","userId":"d9e21d07-3de6-49cd-9e36-cd97931ea51a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T16:19:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"78f8cc1a-3655-443d-b70d-fd81e123d8d3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:19:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78f8cc1a-3655-443d-b70d-fd81e123d8d3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:19:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78f8cc1a-3655-443d-b70d-fd81e123d8d3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:19:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78f8cc1a-3655-443d-b70d-fd81e123d8d3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-132358/sub-test-model-132358\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:19:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"78f8cc1a-3655-443d-b70d-fd81e123d8d3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-07T16:19:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"78f8cc1a-3655-443d-b70d-fd81e123d8d3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:19:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"78f8cc1a-3655-443d-b70d-fd81e123d8d3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T16:19:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"78f8cc1a-3655-443d-b70d-fd81e123d8d3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-f44e24"}
{"level":"info","ts":"2026-07-07T16:19:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"78f8cc1a-3655-443d-b70d-fd81e123d8d3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:19:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"78f8cc1a-3655-443d-b70d-fd81e123d8d3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:19:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c1d6a84189166f94e0da496e219bbdd1195f6f4cb40c1596688c9959e9ce078e"}
{"level":"info","ts":"2026-07-07T16:19:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/25720add6d568b4d76f17be6580d7469dec47397aaf86c831bbde5ba8d8ce402"}
{"level":"info","ts":"2026-07-07T16:19:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a7d4d1247164c844ad5b62aec05130883f81541b2665126fd9bd31a415cc9fbe"}
{"level":"info","ts":"2026-07-07T16:19:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ea36b2dd57bc5ce5a2c7734ffa446e10fa2b9945dfd70da2a0b015b8449ee30c"}
{"level":"info","ts":"2026-07-07T16:19:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a13f41ac1a044179bf5b80fadc3b0b5a45f2af79ed78dc089fae4e3efd9ffa3a"}
{"level":"info","ts":"2026-07-07T16:19:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/69a1a5d8a46d08d48ab14f308f3b3c272ee0b7c92a040be9991a1feb782aa98f"}
{"level":"info","ts":"2026-07-07T16:19:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0762d439f2b7af197178e48af58ec040bb033c44470a73948a06fd800eb60496"}
{"level":"info","ts":"2026-07-07T16:19:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/82bac9eab702e4c9a7c5153ab2c125a4404481d523909aeb4dd212b254730015"}
{"level":"info","ts":"2026-07-07T16:19:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f9da72e13071f20745699022a6f5f4003f80e448459952440117999da1dfa69d"}
{"level":"info","ts":"2026-07-07T16:19:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e1d926338e14cb4e3c88376722c2a245047cf0aa3b4a9cfbdffe2cf1f59f999e"}
{"level":"info","ts":"2026-07-07T16:19:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dc57ddab147121621d9d92cf6ad239c173c97d9b0ea2358bf4cb8f8a39023e61"}
{"level":"info","ts":"2026-07-07T16:19:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/380947789ff0e315a586715e7976f579d3f4beb61f2aa5dbd5ee2135f141f8fb"}
{"level":"info","ts":"2026-07-07T16:19:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/648fe1d00f954f3ab245b9c924fd64472c8ee95a11a614c2d6d79ff1e2474f40"}
{"level":"info","ts":"2026-07-07T16:19:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dfb11436010a6987c4c4935972ea62e2e861b125c3e91ff351784e3ba5c0b428"}
{"level":"info","ts":"2026-07-07T16:19:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9063a7d42a12d017c0b4a075f7e4c8b78dd7cb3a6ee36f6b826051ef3e208148"}
{"level":"info","ts":"2026-07-07T16:19:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4def18ce8171737123b29aa55433ae160f308818d27fc4aa9d00be669c0cbffa"}
{"level":"debug","ts":"2026-07-07T16:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78aa3852458690e87b66ac9493d1e2aea36c0147c1fd89d665cc550c14231563","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:20:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:20:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78aa3852458690e87b66ac9493d1e2aea36c0147c1fd89d665cc550c14231563","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78aa3852458690e87b66ac9493d1e2aea36c0147c1fd89d665cc550c14231563","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:20:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:20:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78aa3852458690e87b66ac9493d1e2aea36c0147c1fd89d665cc550c14231563"}
{"level":"error","ts":"2026-07-07T16:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"78aa3852458690e87b66ac9493d1e2aea36c0147c1fd89d665cc550c14231563","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"78aa3852458690e87b66ac9493d1e2aea36c0147c1fd89d665cc550c14231563\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T16:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78aa3852458690e87b66ac9493d1e2aea36c0147c1fd89d665cc550c14231563","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78aa3852458690e87b66ac9493d1e2aea36c0147c1fd89d665cc550c14231563","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78aa3852458690e87b66ac9493d1e2aea36c0147c1fd89d665cc550c14231563"}
{"level":"debug","ts":"2026-07-07T16:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78aa3852458690e87b66ac9493d1e2aea36c0147c1fd89d665cc550c14231563","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:20:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:20:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78aa3852458690e87b66ac9493d1e2aea36c0147c1fd89d665cc550c14231563"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78aa3852458690e87b66ac9493d1e2aea36c0147c1fd89d665cc550c14231563","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78aa3852458690e87b66ac9493d1e2aea36c0147c1fd89d665cc550c14231563","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78aa3852458690e87b66ac9493d1e2aea36c0147c1fd89d665cc550c14231563"}
{"level":"debug","ts":"2026-07-07T16:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9fa2b1b7967b094b94df2cda61027cb7f7398fa32afa44e33b36771439703cbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:20:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:20:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9fa2b1b7967b094b94df2cda61027cb7f7398fa32afa44e33b36771439703cbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9fa2b1b7967b094b94df2cda61027cb7f7398fa32afa44e33b36771439703cbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9fa2b1b7967b094b94df2cda61027cb7f7398fa32afa44e33b36771439703cbb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9fa2b1b7967b094b94df2cda61027cb7f7398fa32afa44e33b36771439703cbb"}
{"level":"debug","ts":"2026-07-07T16:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9fa2b1b7967b094b94df2cda61027cb7f7398fa32afa44e33b36771439703cbb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9fa2b1b7967b094b94df2cda61027cb7f7398fa32afa44e33b36771439703cbb"}
{"level":"debug","ts":"2026-07-07T16:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9fa2b1b7967b094b94df2cda61027cb7f7398fa32afa44e33b36771439703cbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:20:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:20:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9fa2b1b7967b094b94df2cda61027cb7f7398fa32afa44e33b36771439703cbb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9fa2b1b7967b094b94df2cda61027cb7f7398fa32afa44e33b36771439703cbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9fa2b1b7967b094b94df2cda61027cb7f7398fa32afa44e33b36771439703cbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:20:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:20:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9fa2b1b7967b094b94df2cda61027cb7f7398fa32afa44e33b36771439703cbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85661348386c0fea7b1da998d0d82b4855b0019f0a9e15bf3be7d09f67d0be5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:20:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:20:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9fa2b1b7967b094b94df2cda61027cb7f7398fa32afa44e33b36771439703cbb"}
{"level":"info","ts":"2026-07-07T16:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85661348386c0fea7b1da998d0d82b4855b0019f0a9e15bf3be7d09f67d0be5e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9fa2b1b7967b094b94df2cda61027cb7f7398fa32afa44e33b36771439703cbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:20:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:20:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9fa2b1b7967b094b94df2cda61027cb7f7398fa32afa44e33b36771439703cbb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9fa2b1b7967b094b94df2cda61027cb7f7398fa32afa44e33b36771439703cbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85661348386c0fea7b1da998d0d82b4855b0019f0a9e15bf3be7d09f67d0be5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:20:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:20:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85661348386c0fea7b1da998d0d82b4855b0019f0a9e15bf3be7d09f67d0be5e"}
{"level":"info","ts":"2026-07-07T16:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85661348386c0fea7b1da998d0d82b4855b0019f0a9e15bf3be7d09f67d0be5e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9fa2b1b7967b094b94df2cda61027cb7f7398fa32afa44e33b36771439703cbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:20:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:20:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9fa2b1b7967b094b94df2cda61027cb7f7398fa32afa44e33b36771439703cbb"}
{"level":"info","ts":"2026-07-07T16:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9fa2b1b7967b094b94df2cda61027cb7f7398fa32afa44e33b36771439703cbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85661348386c0fea7b1da998d0d82b4855b0019f0a9e15bf3be7d09f67d0be5e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9fa2b1b7967b094b94df2cda61027cb7f7398fa32afa44e33b36771439703cbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:20:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:20:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9fa2b1b7967b094b94df2cda61027cb7f7398fa32afa44e33b36771439703cbb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9fa2b1b7967b094b94df2cda61027cb7f7398fa32afa44e33b36771439703cbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9fa2b1b7967b094b94df2cda61027cb7f7398fa32afa44e33b36771439703cbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:20:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:20:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9fa2b1b7967b094b94df2cda61027cb7f7398fa32afa44e33b36771439703cbb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85661348386c0fea7b1da998d0d82b4855b0019f0a9e15bf3be7d09f67d0be5e"}
{"level":"error","ts":"2026-07-07T16:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9fa2b1b7967b094b94df2cda61027cb7f7398fa32afa44e33b36771439703cbb","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9fa2b1b7967b094b94df2cda61027cb7f7398fa32afa44e33b36771439703cbb\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T16:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85661348386c0fea7b1da998d0d82b4855b0019f0a9e15bf3be7d09f67d0be5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:20:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:20:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85661348386c0fea7b1da998d0d82b4855b0019f0a9e15bf3be7d09f67d0be5e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85661348386c0fea7b1da998d0d82b4855b0019f0a9e15bf3be7d09f67d0be5e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9fa2b1b7967b094b94df2cda61027cb7f7398fa32afa44e33b36771439703cbb"}
{"level":"debug","ts":"2026-07-07T16:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9fa2b1b7967b094b94df2cda61027cb7f7398fa32afa44e33b36771439703cbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85661348386c0fea7b1da998d0d82b4855b0019f0a9e15bf3be7d09f67d0be5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:20:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:20:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85661348386c0fea7b1da998d0d82b4855b0019f0a9e15bf3be7d09f67d0be5e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85661348386c0fea7b1da998d0d82b4855b0019f0a9e15bf3be7d09f67d0be5e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85661348386c0fea7b1da998d0d82b4855b0019f0a9e15bf3be7d09f67d0be5e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85661348386c0fea7b1da998d0d82b4855b0019f0a9e15bf3be7d09f67d0be5e"}
{"level":"debug","ts":"2026-07-07T16:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85661348386c0fea7b1da998d0d82b4855b0019f0a9e15bf3be7d09f67d0be5e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85661348386c0fea7b1da998d0d82b4855b0019f0a9e15bf3be7d09f67d0be5e"}
{"level":"debug","ts":"2026-07-07T16:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85661348386c0fea7b1da998d0d82b4855b0019f0a9e15bf3be7d09f67d0be5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:20:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:20:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85661348386c0fea7b1da998d0d82b4855b0019f0a9e15bf3be7d09f67d0be5e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85661348386c0fea7b1da998d0d82b4855b0019f0a9e15bf3be7d09f67d0be5e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f6e8816f1c46a8f0d0f1f8d2e2639ebc6bec3c94a04fd0cc32f615d0d80e8c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:20:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:20:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f6e8816f1c46a8f0d0f1f8d2e2639ebc6bec3c94a04fd0cc32f615d0d80e8c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85661348386c0fea7b1da998d0d82b4855b0019f0a9e15bf3be7d09f67d0be5e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f6e8816f1c46a8f0d0f1f8d2e2639ebc6bec3c94a04fd0cc32f615d0d80e8c9"}
{"level":"debug","ts":"2026-07-07T16:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f6e8816f1c46a8f0d0f1f8d2e2639ebc6bec3c94a04fd0cc32f615d0d80e8c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:20:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:20:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f6e8816f1c46a8f0d0f1f8d2e2639ebc6bec3c94a04fd0cc32f615d0d80e8c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f6e8816f1c46a8f0d0f1f8d2e2639ebc6bec3c94a04fd0cc32f615d0d80e8c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f6e8816f1c46a8f0d0f1f8d2e2639ebc6bec3c94a04fd0cc32f615d0d80e8c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:20:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:20:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f6e8816f1c46a8f0d0f1f8d2e2639ebc6bec3c94a04fd0cc32f615d0d80e8c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85661348386c0fea7b1da998d0d82b4855b0019f0a9e15bf3be7d09f67d0be5e"}
{"level":"error","ts":"2026-07-07T16:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8f6e8816f1c46a8f0d0f1f8d2e2639ebc6bec3c94a04fd0cc32f615d0d80e8c9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8f6e8816f1c46a8f0d0f1f8d2e2639ebc6bec3c94a04fd0cc32f615d0d80e8c9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T16:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f6e8816f1c46a8f0d0f1f8d2e2639ebc6bec3c94a04fd0cc32f615d0d80e8c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:20:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:20:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f6e8816f1c46a8f0d0f1f8d2e2639ebc6bec3c94a04fd0cc32f615d0d80e8c9"}
{"level":"info","ts":"2026-07-07T16:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f6e8816f1c46a8f0d0f1f8d2e2639ebc6bec3c94a04fd0cc32f615d0d80e8c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f6e8816f1c46a8f0d0f1f8d2e2639ebc6bec3c94a04fd0cc32f615d0d80e8c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f6e8816f1c46a8f0d0f1f8d2e2639ebc6bec3c94a04fd0cc32f615d0d80e8c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f6e8816f1c46a8f0d0f1f8d2e2639ebc6bec3c94a04fd0cc32f615d0d80e8c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f6e8816f1c46a8f0d0f1f8d2e2639ebc6bec3c94a04fd0cc32f615d0d80e8c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6241ced91e953c01f20d64194268496b13e7a1db76a84f6c44b9ea8f11a52b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:20:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:20:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f6e8816f1c46a8f0d0f1f8d2e2639ebc6bec3c94a04fd0cc32f615d0d80e8c9"}
{"level":"info","ts":"2026-07-07T16:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6241ced91e953c01f20d64194268496b13e7a1db76a84f6c44b9ea8f11a52b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f6e8816f1c46a8f0d0f1f8d2e2639ebc6bec3c94a04fd0cc32f615d0d80e8c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:20:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:20:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f6e8816f1c46a8f0d0f1f8d2e2639ebc6bec3c94a04fd0cc32f615d0d80e8c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6241ced91e953c01f20d64194268496b13e7a1db76a84f6c44b9ea8f11a52b2"}
{"level":"info","ts":"2026-07-07T16:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f6e8816f1c46a8f0d0f1f8d2e2639ebc6bec3c94a04fd0cc32f615d0d80e8c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6241ced91e953c01f20d64194268496b13e7a1db76a84f6c44b9ea8f11a52b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:20:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:20:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6241ced91e953c01f20d64194268496b13e7a1db76a84f6c44b9ea8f11a52b2"}
{"level":"info","ts":"2026-07-07T16:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6241ced91e953c01f20d64194268496b13e7a1db76a84f6c44b9ea8f11a52b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f6e8816f1c46a8f0d0f1f8d2e2639ebc6bec3c94a04fd0cc32f615d0d80e8c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:20:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:20:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f6e8816f1c46a8f0d0f1f8d2e2639ebc6bec3c94a04fd0cc32f615d0d80e8c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6241ced91e953c01f20d64194268496b13e7a1db76a84f6c44b9ea8f11a52b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:20:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:20:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6241ced91e953c01f20d64194268496b13e7a1db76a84f6c44b9ea8f11a52b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f6e8816f1c46a8f0d0f1f8d2e2639ebc6bec3c94a04fd0cc32f615d0d80e8c9"}
{"level":"info","ts":"2026-07-07T16:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6241ced91e953c01f20d64194268496b13e7a1db76a84f6c44b9ea8f11a52b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f6e8816f1c46a8f0d0f1f8d2e2639ebc6bec3c94a04fd0cc32f615d0d80e8c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:20:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:20:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f6e8816f1c46a8f0d0f1f8d2e2639ebc6bec3c94a04fd0cc32f615d0d80e8c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6241ced91e953c01f20d64194268496b13e7a1db76a84f6c44b9ea8f11a52b2"}
{"level":"info","ts":"2026-07-07T16:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f6e8816f1c46a8f0d0f1f8d2e2639ebc6bec3c94a04fd0cc32f615d0d80e8c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6241ced91e953c01f20d64194268496b13e7a1db76a84f6c44b9ea8f11a52b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f8b52584c83ea84e170b58c7824346c700c775206e7277006ff1471ad231e3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:20:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:20:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f6e8816f1c46a8f0d0f1f8d2e2639ebc6bec3c94a04fd0cc32f615d0d80e8c9"}
{"level":"info","ts":"2026-07-07T16:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f8b52584c83ea84e170b58c7824346c700c775206e7277006ff1471ad231e3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f6e8816f1c46a8f0d0f1f8d2e2639ebc6bec3c94a04fd0cc32f615d0d80e8c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f8b52584c83ea84e170b58c7824346c700c775206e7277006ff1471ad231e3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f8b52584c83ea84e170b58c7824346c700c775206e7277006ff1471ad231e3b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6241ced91e953c01f20d64194268496b13e7a1db76a84f6c44b9ea8f11a52b2"}
{"level":"debug","ts":"2026-07-07T16:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f8b52584c83ea84e170b58c7824346c700c775206e7277006ff1471ad231e3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:20:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:20:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f8b52584c83ea84e170b58c7824346c700c775206e7277006ff1471ad231e3b"}
{"level":"info","ts":"2026-07-07T16:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f8b52584c83ea84e170b58c7824346c700c775206e7277006ff1471ad231e3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f8b52584c83ea84e170b58c7824346c700c775206e7277006ff1471ad231e3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:20:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:20:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f8b52584c83ea84e170b58c7824346c700c775206e7277006ff1471ad231e3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f6e8816f1c46a8f0d0f1f8d2e2639ebc6bec3c94a04fd0cc32f615d0d80e8c9"}
{"level":"info","ts":"2026-07-07T16:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f8b52584c83ea84e170b58c7824346c700c775206e7277006ff1471ad231e3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f8b52584c83ea84e170b58c7824346c700c775206e7277006ff1471ad231e3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:20:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:20:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f8b52584c83ea84e170b58c7824346c700c775206e7277006ff1471ad231e3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f8b52584c83ea84e170b58c7824346c700c775206e7277006ff1471ad231e3b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f8b52584c83ea84e170b58c7824346c700c775206e7277006ff1471ad231e3b"}
{"level":"debug","ts":"2026-07-07T16:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f8b52584c83ea84e170b58c7824346c700c775206e7277006ff1471ad231e3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70fe7aa1ebcfd2bb2b068ff01a07008c281551ecc0a3b3369666870bad273016","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:20:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:20:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f8b52584c83ea84e170b58c7824346c700c775206e7277006ff1471ad231e3b"}
{"level":"info","ts":"2026-07-07T16:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70fe7aa1ebcfd2bb2b068ff01a07008c281551ecc0a3b3369666870bad273016","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f8b52584c83ea84e170b58c7824346c700c775206e7277006ff1471ad231e3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:20:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:20:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f8b52584c83ea84e170b58c7824346c700c775206e7277006ff1471ad231e3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70fe7aa1ebcfd2bb2b068ff01a07008c281551ecc0a3b3369666870bad273016"}
{"level":"info","ts":"2026-07-07T16:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f8b52584c83ea84e170b58c7824346c700c775206e7277006ff1471ad231e3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70fe7aa1ebcfd2bb2b068ff01a07008c281551ecc0a3b3369666870bad273016","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:20:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:20:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70fe7aa1ebcfd2bb2b068ff01a07008c281551ecc0a3b3369666870bad273016","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f8b52584c83ea84e170b58c7824346c700c775206e7277006ff1471ad231e3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70fe7aa1ebcfd2bb2b068ff01a07008c281551ecc0a3b3369666870bad273016","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70fe7aa1ebcfd2bb2b068ff01a07008c281551ecc0a3b3369666870bad273016"}
{"level":"debug","ts":"2026-07-07T16:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70fe7aa1ebcfd2bb2b068ff01a07008c281551ecc0a3b3369666870bad273016","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:20:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:20:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70fe7aa1ebcfd2bb2b068ff01a07008c281551ecc0a3b3369666870bad273016"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f8b52584c83ea84e170b58c7824346c700c775206e7277006ff1471ad231e3b"}
{"level":"info","ts":"2026-07-07T16:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70fe7aa1ebcfd2bb2b068ff01a07008c281551ecc0a3b3369666870bad273016","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70fe7aa1ebcfd2bb2b068ff01a07008c281551ecc0a3b3369666870bad273016","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:20:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:20:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70fe7aa1ebcfd2bb2b068ff01a07008c281551ecc0a3b3369666870bad273016","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70fe7aa1ebcfd2bb2b068ff01a07008c281551ecc0a3b3369666870bad273016","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70fe7aa1ebcfd2bb2b068ff01a07008c281551ecc0a3b3369666870bad273016"}
{"level":"debug","ts":"2026-07-07T16:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70fe7aa1ebcfd2bb2b068ff01a07008c281551ecc0a3b3369666870bad273016","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70fe7aa1ebcfd2bb2b068ff01a07008c281551ecc0a3b3369666870bad273016","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70fe7aa1ebcfd2bb2b068ff01a07008c281551ecc0a3b3369666870bad273016"}
{"level":"debug","ts":"2026-07-07T16:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70fe7aa1ebcfd2bb2b068ff01a07008c281551ecc0a3b3369666870bad273016","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:20:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:20:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70fe7aa1ebcfd2bb2b068ff01a07008c281551ecc0a3b3369666870bad273016"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70fe7aa1ebcfd2bb2b068ff01a07008c281551ecc0a3b3369666870bad273016","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f491763020e7ea6dcc052f3a32f241b36b4c58e83b9494151b804909ee70aff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:20:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:20:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f491763020e7ea6dcc052f3a32f241b36b4c58e83b9494151b804909ee70aff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70fe7aa1ebcfd2bb2b068ff01a07008c281551ecc0a3b3369666870bad273016","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f491763020e7ea6dcc052f3a32f241b36b4c58e83b9494151b804909ee70aff","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f491763020e7ea6dcc052f3a32f241b36b4c58e83b9494151b804909ee70aff"}
{"level":"debug","ts":"2026-07-07T16:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f491763020e7ea6dcc052f3a32f241b36b4c58e83b9494151b804909ee70aff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:20:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:20:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f491763020e7ea6dcc052f3a32f241b36b4c58e83b9494151b804909ee70aff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f491763020e7ea6dcc052f3a32f241b36b4c58e83b9494151b804909ee70aff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f491763020e7ea6dcc052f3a32f241b36b4c58e83b9494151b804909ee70aff","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70fe7aa1ebcfd2bb2b068ff01a07008c281551ecc0a3b3369666870bad273016"}
{"level":"info","ts":"2026-07-07T16:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f491763020e7ea6dcc052f3a32f241b36b4c58e83b9494151b804909ee70aff"}
{"level":"debug","ts":"2026-07-07T16:20:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe740d6fc7b2d2198dac07f335a22e1600fda73d6feb12d8c852c0568fee2f28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:20:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:20:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe740d6fc7b2d2198dac07f335a22e1600fda73d6feb12d8c852c0568fee2f28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe740d6fc7b2d2198dac07f335a22e1600fda73d6feb12d8c852c0568fee2f28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe740d6fc7b2d2198dac07f335a22e1600fda73d6feb12d8c852c0568fee2f28","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:20:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe740d6fc7b2d2198dac07f335a22e1600fda73d6feb12d8c852c0568fee2f28"}
{"level":"debug","ts":"2026-07-07T16:20:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe740d6fc7b2d2198dac07f335a22e1600fda73d6feb12d8c852c0568fee2f28","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:20:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe740d6fc7b2d2198dac07f335a22e1600fda73d6feb12d8c852c0568fee2f28"}
{"level":"debug","ts":"2026-07-07T16:20:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe740d6fc7b2d2198dac07f335a22e1600fda73d6feb12d8c852c0568fee2f28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:20:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:20:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe740d6fc7b2d2198dac07f335a22e1600fda73d6feb12d8c852c0568fee2f28"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe740d6fc7b2d2198dac07f335a22e1600fda73d6feb12d8c852c0568fee2f28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe740d6fc7b2d2198dac07f335a22e1600fda73d6feb12d8c852c0568fee2f28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:20:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:20:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe740d6fc7b2d2198dac07f335a22e1600fda73d6feb12d8c852c0568fee2f28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe740d6fc7b2d2198dac07f335a22e1600fda73d6feb12d8c852c0568fee2f28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe740d6fc7b2d2198dac07f335a22e1600fda73d6feb12d8c852c0568fee2f28","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:20:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe740d6fc7b2d2198dac07f335a22e1600fda73d6feb12d8c852c0568fee2f28"}
{"level":"debug","ts":"2026-07-07T16:20:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe740d6fc7b2d2198dac07f335a22e1600fda73d6feb12d8c852c0568fee2f28","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:20:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe740d6fc7b2d2198dac07f335a22e1600fda73d6feb12d8c852c0568fee2f28"}
{"level":"debug","ts":"2026-07-07T16:20:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe740d6fc7b2d2198dac07f335a22e1600fda73d6feb12d8c852c0568fee2f28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:20:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:20:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe740d6fc7b2d2198dac07f335a22e1600fda73d6feb12d8c852c0568fee2f28"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe740d6fc7b2d2198dac07f335a22e1600fda73d6feb12d8c852c0568fee2f28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe740d6fc7b2d2198dac07f335a22e1600fda73d6feb12d8c852c0568fee2f28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:20:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:20:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe740d6fc7b2d2198dac07f335a22e1600fda73d6feb12d8c852c0568fee2f28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe740d6fc7b2d2198dac07f335a22e1600fda73d6feb12d8c852c0568fee2f28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe740d6fc7b2d2198dac07f335a22e1600fda73d6feb12d8c852c0568fee2f28","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe740d6fc7b2d2198dac07f335a22e1600fda73d6feb12d8c852c0568fee2f28"}
{"level":"debug","ts":"2026-07-07T16:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe740d6fc7b2d2198dac07f335a22e1600fda73d6feb12d8c852c0568fee2f28","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe740d6fc7b2d2198dac07f335a22e1600fda73d6feb12d8c852c0568fee2f28"}
{"level":"debug","ts":"2026-07-07T16:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe740d6fc7b2d2198dac07f335a22e1600fda73d6feb12d8c852c0568fee2f28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:20:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:20:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe740d6fc7b2d2198dac07f335a22e1600fda73d6feb12d8c852c0568fee2f28"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe740d6fc7b2d2198dac07f335a22e1600fda73d6feb12d8c852c0568fee2f28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe740d6fc7b2d2198dac07f335a22e1600fda73d6feb12d8c852c0568fee2f28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:20:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:20:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe740d6fc7b2d2198dac07f335a22e1600fda73d6feb12d8c852c0568fee2f28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe740d6fc7b2d2198dac07f335a22e1600fda73d6feb12d8c852c0568fee2f28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe740d6fc7b2d2198dac07f335a22e1600fda73d6feb12d8c852c0568fee2f28","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe740d6fc7b2d2198dac07f335a22e1600fda73d6feb12d8c852c0568fee2f28"}
{"level":"debug","ts":"2026-07-07T16:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe740d6fc7b2d2198dac07f335a22e1600fda73d6feb12d8c852c0568fee2f28","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe740d6fc7b2d2198dac07f335a22e1600fda73d6feb12d8c852c0568fee2f28"}
{"level":"debug","ts":"2026-07-07T16:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe740d6fc7b2d2198dac07f335a22e1600fda73d6feb12d8c852c0568fee2f28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:20:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:20:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe740d6fc7b2d2198dac07f335a22e1600fda73d6feb12d8c852c0568fee2f28"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe740d6fc7b2d2198dac07f335a22e1600fda73d6feb12d8c852c0568fee2f28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2229179d1e190639226ed3306298b75fd67df8b3242af7086e94c31f08991670","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:20:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:20:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2229179d1e190639226ed3306298b75fd67df8b3242af7086e94c31f08991670","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe740d6fc7b2d2198dac07f335a22e1600fda73d6feb12d8c852c0568fee2f28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2229179d1e190639226ed3306298b75fd67df8b3242af7086e94c31f08991670","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2229179d1e190639226ed3306298b75fd67df8b3242af7086e94c31f08991670"}
{"level":"debug","ts":"2026-07-07T16:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2229179d1e190639226ed3306298b75fd67df8b3242af7086e94c31f08991670","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:20:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:20:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2229179d1e190639226ed3306298b75fd67df8b3242af7086e94c31f08991670"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2229179d1e190639226ed3306298b75fd67df8b3242af7086e94c31f08991670","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2229179d1e190639226ed3306298b75fd67df8b3242af7086e94c31f08991670","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe740d6fc7b2d2198dac07f335a22e1600fda73d6feb12d8c852c0568fee2f28"}
{"level":"info","ts":"2026-07-07T16:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2229179d1e190639226ed3306298b75fd67df8b3242af7086e94c31f08991670"}
{"level":"debug","ts":"2026-07-07T16:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9f9be3d7c8ed815064283d76f387404d04d3787a0f4a7eb0ee5d8c4b39659a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:20:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:20:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9f9be3d7c8ed815064283d76f387404d04d3787a0f4a7eb0ee5d8c4b39659a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9f9be3d7c8ed815064283d76f387404d04d3787a0f4a7eb0ee5d8c4b39659a9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9f9be3d7c8ed815064283d76f387404d04d3787a0f4a7eb0ee5d8c4b39659a9"}
{"level":"debug","ts":"2026-07-07T16:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9f9be3d7c8ed815064283d76f387404d04d3787a0f4a7eb0ee5d8c4b39659a9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9f9be3d7c8ed815064283d76f387404d04d3787a0f4a7eb0ee5d8c4b39659a9"}
{"level":"debug","ts":"2026-07-07T16:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9f9be3d7c8ed815064283d76f387404d04d3787a0f4a7eb0ee5d8c4b39659a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:20:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:20:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d9f9be3d7c8ed815064283d76f387404d04d3787a0f4a7eb0ee5d8c4b39659a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9f9be3d7c8ed815064283d76f387404d04d3787a0f4a7eb0ee5d8c4b39659a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9f9be3d7c8ed815064283d76f387404d04d3787a0f4a7eb0ee5d8c4b39659a9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9f9be3d7c8ed815064283d76f387404d04d3787a0f4a7eb0ee5d8c4b39659a9"}
{"level":"debug","ts":"2026-07-07T16:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c4837bb948a57692c1f9958f1fe527b98d2c5a74c2ef139553fb58a1d793d16","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:20:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:20:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c4837bb948a57692c1f9958f1fe527b98d2c5a74c2ef139553fb58a1d793d16","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c4837bb948a57692c1f9958f1fe527b98d2c5a74c2ef139553fb58a1d793d16","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c4837bb948a57692c1f9958f1fe527b98d2c5a74c2ef139553fb58a1d793d16"}
{"level":"debug","ts":"2026-07-07T16:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c4837bb948a57692c1f9958f1fe527b98d2c5a74c2ef139553fb58a1d793d16","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c4837bb948a57692c1f9958f1fe527b98d2c5a74c2ef139553fb58a1d793d16","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c4837bb948a57692c1f9958f1fe527b98d2c5a74c2ef139553fb58a1d793d16"}
{"level":"debug","ts":"2026-07-07T16:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c4837bb948a57692c1f9958f1fe527b98d2c5a74c2ef139553fb58a1d793d16","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:20:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:20:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c4837bb948a57692c1f9958f1fe527b98d2c5a74c2ef139553fb58a1d793d16"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c4837bb948a57692c1f9958f1fe527b98d2c5a74c2ef139553fb58a1d793d16","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e513592a541b25f8085edfc1d1293b97e873fe273e572c5469f4694937e5cec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:20:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:20:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e513592a541b25f8085edfc1d1293b97e873fe273e572c5469f4694937e5cec"}
{"level":"info","ts":"2026-07-07T16:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e513592a541b25f8085edfc1d1293b97e873fe273e572c5469f4694937e5cec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c4837bb948a57692c1f9958f1fe527b98d2c5a74c2ef139553fb58a1d793d16","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:20:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:20:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c4837bb948a57692c1f9958f1fe527b98d2c5a74c2ef139553fb58a1d793d16"}
{"level":"info","ts":"2026-07-07T16:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c4837bb948a57692c1f9958f1fe527b98d2c5a74c2ef139553fb58a1d793d16","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e513592a541b25f8085edfc1d1293b97e873fe273e572c5469f4694937e5cec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c4837bb948a57692c1f9958f1fe527b98d2c5a74c2ef139553fb58a1d793d16","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:20:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:20:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c4837bb948a57692c1f9958f1fe527b98d2c5a74c2ef139553fb58a1d793d16"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e513592a541b25f8085edfc1d1293b97e873fe273e572c5469f4694937e5cec"}
{"level":"info","ts":"2026-07-07T16:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c4837bb948a57692c1f9958f1fe527b98d2c5a74c2ef139553fb58a1d793d16","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e513592a541b25f8085edfc1d1293b97e873fe273e572c5469f4694937e5cec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:20:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:20:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5e513592a541b25f8085edfc1d1293b97e873fe273e572c5469f4694937e5cec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c4837bb948a57692c1f9958f1fe527b98d2c5a74c2ef139553fb58a1d793d16"}
{"level":"info","ts":"2026-07-07T16:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e513592a541b25f8085edfc1d1293b97e873fe273e572c5469f4694937e5cec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c4837bb948a57692c1f9958f1fe527b98d2c5a74c2ef139553fb58a1d793d16","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"720b119ef6cd26e8da493fe03bea89224645347d2376e3849b4382078c168d19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:20:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:20:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/720b119ef6cd26e8da493fe03bea89224645347d2376e3849b4382078c168d19"}
{"level":"info","ts":"2026-07-07T16:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"720b119ef6cd26e8da493fe03bea89224645347d2376e3849b4382078c168d19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e513592a541b25f8085edfc1d1293b97e873fe273e572c5469f4694937e5cec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"720b119ef6cd26e8da493fe03bea89224645347d2376e3849b4382078c168d19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:20:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:20:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["720b119ef6cd26e8da493fe03bea89224645347d2376e3849b4382078c168d19"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c4837bb948a57692c1f9958f1fe527b98d2c5a74c2ef139553fb58a1d793d16"}
{"level":"info","ts":"2026-07-07T16:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"720b119ef6cd26e8da493fe03bea89224645347d2376e3849b4382078c168d19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"720b119ef6cd26e8da493fe03bea89224645347d2376e3849b4382078c168d19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:20:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:20:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["720b119ef6cd26e8da493fe03bea89224645347d2376e3849b4382078c168d19"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e513592a541b25f8085edfc1d1293b97e873fe273e572c5469f4694937e5cec"}
{"level":"error","ts":"2026-07-07T16:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"720b119ef6cd26e8da493fe03bea89224645347d2376e3849b4382078c168d19","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"720b119ef6cd26e8da493fe03bea89224645347d2376e3849b4382078c168d19\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T16:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"720b119ef6cd26e8da493fe03bea89224645347d2376e3849b4382078c168d19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:20:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:20:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/720b119ef6cd26e8da493fe03bea89224645347d2376e3849b4382078c168d19"}
{"level":"info","ts":"2026-07-07T16:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"720b119ef6cd26e8da493fe03bea89224645347d2376e3849b4382078c168d19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"720b119ef6cd26e8da493fe03bea89224645347d2376e3849b4382078c168d19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"720b119ef6cd26e8da493fe03bea89224645347d2376e3849b4382078c168d19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ff33a0204338fe25d7028ac4127a3edd3cccadd4219105675c06d66e177473d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:20:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:20:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/720b119ef6cd26e8da493fe03bea89224645347d2376e3849b4382078c168d19"}
{"level":"info","ts":"2026-07-07T16:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ff33a0204338fe25d7028ac4127a3edd3cccadd4219105675c06d66e177473d"}
{"level":"info","ts":"2026-07-07T16:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ff33a0204338fe25d7028ac4127a3edd3cccadd4219105675c06d66e177473d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ff33a0204338fe25d7028ac4127a3edd3cccadd4219105675c06d66e177473d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:20:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:20:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ff33a0204338fe25d7028ac4127a3edd3cccadd4219105675c06d66e177473d"}
{"level":"info","ts":"2026-07-07T16:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ff33a0204338fe25d7028ac4127a3edd3cccadd4219105675c06d66e177473d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"720b119ef6cd26e8da493fe03bea89224645347d2376e3849b4382078c168d19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:20:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:20:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["720b119ef6cd26e8da493fe03bea89224645347d2376e3849b4382078c168d19"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"720b119ef6cd26e8da493fe03bea89224645347d2376e3849b4382078c168d19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ff33a0204338fe25d7028ac4127a3edd3cccadd4219105675c06d66e177473d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"720b119ef6cd26e8da493fe03bea89224645347d2376e3849b4382078c168d19","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ff33a0204338fe25d7028ac4127a3edd3cccadd4219105675c06d66e177473d"}
{"level":"debug","ts":"2026-07-07T16:20:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e8d0ceec1fb8e75a2b8c504b54ab84af2bb4b71afeaa20d185a22b5c18213c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:20:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:20:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/720b119ef6cd26e8da493fe03bea89224645347d2376e3849b4382078c168d19"}
{"level":"info","ts":"2026-07-07T16:20:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e8d0ceec1fb8e75a2b8c504b54ab84af2bb4b71afeaa20d185a22b5c18213c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ff33a0204338fe25d7028ac4127a3edd3cccadd4219105675c06d66e177473d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:20:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:20:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0ff33a0204338fe25d7028ac4127a3edd3cccadd4219105675c06d66e177473d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e8d0ceec1fb8e75a2b8c504b54ab84af2bb4b71afeaa20d185a22b5c18213c0"}
{"level":"info","ts":"2026-07-07T16:20:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ff33a0204338fe25d7028ac4127a3edd3cccadd4219105675c06d66e177473d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e8d0ceec1fb8e75a2b8c504b54ab84af2bb4b71afeaa20d185a22b5c18213c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:20:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:20:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e8d0ceec1fb8e75a2b8c504b54ab84af2bb4b71afeaa20d185a22b5c18213c0"}
{"level":"info","ts":"2026-07-07T16:20:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e8d0ceec1fb8e75a2b8c504b54ab84af2bb4b71afeaa20d185a22b5c18213c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ff33a0204338fe25d7028ac4127a3edd3cccadd4219105675c06d66e177473d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:20:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:20:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ff33a0204338fe25d7028ac4127a3edd3cccadd4219105675c06d66e177473d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e8d0ceec1fb8e75a2b8c504b54ab84af2bb4b71afeaa20d185a22b5c18213c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:20:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:20:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e8d0ceec1fb8e75a2b8c504b54ab84af2bb4b71afeaa20d185a22b5c18213c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ff33a0204338fe25d7028ac4127a3edd3cccadd4219105675c06d66e177473d"}
{"level":"info","ts":"2026-07-07T16:20:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e8d0ceec1fb8e75a2b8c504b54ab84af2bb4b71afeaa20d185a22b5c18213c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ff33a0204338fe25d7028ac4127a3edd3cccadd4219105675c06d66e177473d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:20:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:20:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0ff33a0204338fe25d7028ac4127a3edd3cccadd4219105675c06d66e177473d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ff33a0204338fe25d7028ac4127a3edd3cccadd4219105675c06d66e177473d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e8d0ceec1fb8e75a2b8c504b54ab84af2bb4b71afeaa20d185a22b5c18213c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:20:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:20:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e8d0ceec1fb8e75a2b8c504b54ab84af2bb4b71afeaa20d185a22b5c18213c0"}
{"level":"info","ts":"2026-07-07T16:20:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e8d0ceec1fb8e75a2b8c504b54ab84af2bb4b71afeaa20d185a22b5c18213c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ff33a0204338fe25d7028ac4127a3edd3cccadd4219105675c06d66e177473d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:20:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:20:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ff33a0204338fe25d7028ac4127a3edd3cccadd4219105675c06d66e177473d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e8d0ceec1fb8e75a2b8c504b54ab84af2bb4b71afeaa20d185a22b5c18213c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:20:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:20:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e8d0ceec1fb8e75a2b8c504b54ab84af2bb4b71afeaa20d185a22b5c18213c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ff33a0204338fe25d7028ac4127a3edd3cccadd4219105675c06d66e177473d"}
{"level":"info","ts":"2026-07-07T16:20:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e8d0ceec1fb8e75a2b8c504b54ab84af2bb4b71afeaa20d185a22b5c18213c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ff33a0204338fe25d7028ac4127a3edd3cccadd4219105675c06d66e177473d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:20:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:20:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0ff33a0204338fe25d7028ac4127a3edd3cccadd4219105675c06d66e177473d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ff33a0204338fe25d7028ac4127a3edd3cccadd4219105675c06d66e177473d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e8d0ceec1fb8e75a2b8c504b54ab84af2bb4b71afeaa20d185a22b5c18213c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:20:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:20:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e8d0ceec1fb8e75a2b8c504b54ab84af2bb4b71afeaa20d185a22b5c18213c0"}
{"level":"info","ts":"2026-07-07T16:20:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e8d0ceec1fb8e75a2b8c504b54ab84af2bb4b71afeaa20d185a22b5c18213c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ff33a0204338fe25d7028ac4127a3edd3cccadd4219105675c06d66e177473d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:20:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:20:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ff33a0204338fe25d7028ac4127a3edd3cccadd4219105675c06d66e177473d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e8d0ceec1fb8e75a2b8c504b54ab84af2bb4b71afeaa20d185a22b5c18213c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:20:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:20:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e8d0ceec1fb8e75a2b8c504b54ab84af2bb4b71afeaa20d185a22b5c18213c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ff33a0204338fe25d7028ac4127a3edd3cccadd4219105675c06d66e177473d"}
{"level":"info","ts":"2026-07-07T16:20:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e8d0ceec1fb8e75a2b8c504b54ab84af2bb4b71afeaa20d185a22b5c18213c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ff33a0204338fe25d7028ac4127a3edd3cccadd4219105675c06d66e177473d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:20:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:20:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0ff33a0204338fe25d7028ac4127a3edd3cccadd4219105675c06d66e177473d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e8d0ceec1fb8e75a2b8c504b54ab84af2bb4b71afeaa20d185a22b5c18213c0"}
{"level":"info","ts":"2026-07-07T16:20:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ff33a0204338fe25d7028ac4127a3edd3cccadd4219105675c06d66e177473d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e8d0ceec1fb8e75a2b8c504b54ab84af2bb4b71afeaa20d185a22b5c18213c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ff33a0204338fe25d7028ac4127a3edd3cccadd4219105675c06d66e177473d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:20:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:20:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ff33a0204338fe25d7028ac4127a3edd3cccadd4219105675c06d66e177473d"}
{"level":"info","ts":"2026-07-07T16:20:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ff33a0204338fe25d7028ac4127a3edd3cccadd4219105675c06d66e177473d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ff33a0204338fe25d7028ac4127a3edd3cccadd4219105675c06d66e177473d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:20:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:20:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0ff33a0204338fe25d7028ac4127a3edd3cccadd4219105675c06d66e177473d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e8d0ceec1fb8e75a2b8c504b54ab84af2bb4b71afeaa20d185a22b5c18213c0"}
{"level":"info","ts":"2026-07-07T16:20:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ff33a0204338fe25d7028ac4127a3edd3cccadd4219105675c06d66e177473d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ff33a0204338fe25d7028ac4127a3edd3cccadd4219105675c06d66e177473d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ff33a0204338fe25d7028ac4127a3edd3cccadd4219105675c06d66e177473d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:20:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:20:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ff33a0204338fe25d7028ac4127a3edd3cccadd4219105675c06d66e177473d"}
{"level":"info","ts":"2026-07-07T16:20:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ff33a0204338fe25d7028ac4127a3edd3cccadd4219105675c06d66e177473d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ff33a0204338fe25d7028ac4127a3edd3cccadd4219105675c06d66e177473d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:20:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:20:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T16:20:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0ff33a0204338fe25d7028ac4127a3edd3cccadd4219105675c06d66e177473d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0ff33a0204338fe25d7028ac4127a3edd3cccadd4219105675c06d66e177473d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T16:20:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ff33a0204338fe25d7028ac4127a3edd3cccadd4219105675c06d66e177473d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:20:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ff33a0204338fe25d7028ac4127a3edd3cccadd4219105675c06d66e177473d"}
{"level":"debug","ts":"2026-07-07T16:20:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ff33a0204338fe25d7028ac4127a3edd3cccadd4219105675c06d66e177473d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:20:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ff33a0204338fe25d7028ac4127a3edd3cccadd4219105675c06d66e177473d"}
{"level":"debug","ts":"2026-07-07T16:20:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ff33a0204338fe25d7028ac4127a3edd3cccadd4219105675c06d66e177473d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:20:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:20:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0ff33a0204338fe25d7028ac4127a3edd3cccadd4219105675c06d66e177473d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ff33a0204338fe25d7028ac4127a3edd3cccadd4219105675c06d66e177473d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ff33a0204338fe25d7028ac4127a3edd3cccadd4219105675c06d66e177473d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:20:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ff33a0204338fe25d7028ac4127a3edd3cccadd4219105675c06d66e177473d"}
{"level":"debug","ts":"2026-07-07T16:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6241ced91e953c01f20d64194268496b13e7a1db76a84f6c44b9ea8f11a52b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:20:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:20:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6241ced91e953c01f20d64194268496b13e7a1db76a84f6c44b9ea8f11a52b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6241ced91e953c01f20d64194268496b13e7a1db76a84f6c44b9ea8f11a52b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6241ced91e953c01f20d64194268496b13e7a1db76a84f6c44b9ea8f11a52b2"}
{"level":"debug","ts":"2026-07-07T16:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6241ced91e953c01f20d64194268496b13e7a1db76a84f6c44b9ea8f11a52b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6241ced91e953c01f20d64194268496b13e7a1db76a84f6c44b9ea8f11a52b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6241ced91e953c01f20d64194268496b13e7a1db76a84f6c44b9ea8f11a52b2"}
{"level":"debug","ts":"2026-07-07T16:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6241ced91e953c01f20d64194268496b13e7a1db76a84f6c44b9ea8f11a52b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:20:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:20:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6241ced91e953c01f20d64194268496b13e7a1db76a84f6c44b9ea8f11a52b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6241ced91e953c01f20d64194268496b13e7a1db76a84f6c44b9ea8f11a52b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6241ced91e953c01f20d64194268496b13e7a1db76a84f6c44b9ea8f11a52b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:20:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:20:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6241ced91e953c01f20d64194268496b13e7a1db76a84f6c44b9ea8f11a52b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6241ced91e953c01f20d64194268496b13e7a1db76a84f6c44b9ea8f11a52b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6241ced91e953c01f20d64194268496b13e7a1db76a84f6c44b9ea8f11a52b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6241ced91e953c01f20d64194268496b13e7a1db76a84f6c44b9ea8f11a52b2"}
{"level":"debug","ts":"2026-07-07T16:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6241ced91e953c01f20d64194268496b13e7a1db76a84f6c44b9ea8f11a52b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6241ced91e953c01f20d64194268496b13e7a1db76a84f6c44b9ea8f11a52b2"}
{"level":"debug","ts":"2026-07-07T16:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6241ced91e953c01f20d64194268496b13e7a1db76a84f6c44b9ea8f11a52b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:20:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:20:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6241ced91e953c01f20d64194268496b13e7a1db76a84f6c44b9ea8f11a52b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6241ced91e953c01f20d64194268496b13e7a1db76a84f6c44b9ea8f11a52b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6241ced91e953c01f20d64194268496b13e7a1db76a84f6c44b9ea8f11a52b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:20:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:20:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6241ced91e953c01f20d64194268496b13e7a1db76a84f6c44b9ea8f11a52b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6241ced91e953c01f20d64194268496b13e7a1db76a84f6c44b9ea8f11a52b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6241ced91e953c01f20d64194268496b13e7a1db76a84f6c44b9ea8f11a52b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6241ced91e953c01f20d64194268496b13e7a1db76a84f6c44b9ea8f11a52b2"}
{"level":"debug","ts":"2026-07-07T16:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6241ced91e953c01f20d64194268496b13e7a1db76a84f6c44b9ea8f11a52b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6241ced91e953c01f20d64194268496b13e7a1db76a84f6c44b9ea8f11a52b2"}
{"level":"debug","ts":"2026-07-07T16:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6241ced91e953c01f20d64194268496b13e7a1db76a84f6c44b9ea8f11a52b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:20:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:20:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6241ced91e953c01f20d64194268496b13e7a1db76a84f6c44b9ea8f11a52b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6241ced91e953c01f20d64194268496b13e7a1db76a84f6c44b9ea8f11a52b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70fe7aa1ebcfd2bb2b068ff01a07008c281551ecc0a3b3369666870bad273016","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:20:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:20:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70fe7aa1ebcfd2bb2b068ff01a07008c281551ecc0a3b3369666870bad273016"}
{"level":"info","ts":"2026-07-07T16:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70fe7aa1ebcfd2bb2b068ff01a07008c281551ecc0a3b3369666870bad273016","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6241ced91e953c01f20d64194268496b13e7a1db76a84f6c44b9ea8f11a52b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:20:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:20:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6241ced91e953c01f20d64194268496b13e7a1db76a84f6c44b9ea8f11a52b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70fe7aa1ebcfd2bb2b068ff01a07008c281551ecc0a3b3369666870bad273016","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:20:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:20:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70fe7aa1ebcfd2bb2b068ff01a07008c281551ecc0a3b3369666870bad273016"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6241ced91e953c01f20d64194268496b13e7a1db76a84f6c44b9ea8f11a52b2"}
{"level":"info","ts":"2026-07-07T16:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70fe7aa1ebcfd2bb2b068ff01a07008c281551ecc0a3b3369666870bad273016","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6241ced91e953c01f20d64194268496b13e7a1db76a84f6c44b9ea8f11a52b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:20:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:20:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6241ced91e953c01f20d64194268496b13e7a1db76a84f6c44b9ea8f11a52b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70fe7aa1ebcfd2bb2b068ff01a07008c281551ecc0a3b3369666870bad273016"}
{"level":"info","ts":"2026-07-07T16:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6241ced91e953c01f20d64194268496b13e7a1db76a84f6c44b9ea8f11a52b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70fe7aa1ebcfd2bb2b068ff01a07008c281551ecc0a3b3369666870bad273016","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6241ced91e953c01f20d64194268496b13e7a1db76a84f6c44b9ea8f11a52b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:20:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:20:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6241ced91e953c01f20d64194268496b13e7a1db76a84f6c44b9ea8f11a52b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6241ced91e953c01f20d64194268496b13e7a1db76a84f6c44b9ea8f11a52b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6241ced91e953c01f20d64194268496b13e7a1db76a84f6c44b9ea8f11a52b2"}
{"level":"debug","ts":"2026-07-07T16:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6241ced91e953c01f20d64194268496b13e7a1db76a84f6c44b9ea8f11a52b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:20:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:20:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6241ced91e953c01f20d64194268496b13e7a1db76a84f6c44b9ea8f11a52b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6241ced91e953c01f20d64194268496b13e7a1db76a84f6c44b9ea8f11a52b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6241ced91e953c01f20d64194268496b13e7a1db76a84f6c44b9ea8f11a52b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70fe7aa1ebcfd2bb2b068ff01a07008c281551ecc0a3b3369666870bad273016"}
{"level":"info","ts":"2026-07-07T16:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6241ced91e953c01f20d64194268496b13e7a1db76a84f6c44b9ea8f11a52b2"}
{"level":"debug","ts":"2026-07-07T16:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2229179d1e190639226ed3306298b75fd67df8b3242af7086e94c31f08991670","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2229179d1e190639226ed3306298b75fd67df8b3242af7086e94c31f08991670"}
{"level":"debug","ts":"2026-07-07T16:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c4837bb948a57692c1f9958f1fe527b98d2c5a74c2ef139553fb58a1d793d16","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c4837bb948a57692c1f9958f1fe527b98d2c5a74c2ef139553fb58a1d793d16"}
{"level":"debug","ts":"2026-07-07T16:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f6e8816f1c46a8f0d0f1f8d2e2639ebc6bec3c94a04fd0cc32f615d0d80e8c9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f6e8816f1c46a8f0d0f1f8d2e2639ebc6bec3c94a04fd0cc32f615d0d80e8c9"}
{"level":"debug","ts":"2026-07-07T16:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78aa3852458690e87b66ac9493d1e2aea36c0147c1fd89d665cc550c14231563","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:20:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:20:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78aa3852458690e87b66ac9493d1e2aea36c0147c1fd89d665cc550c14231563","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78aa3852458690e87b66ac9493d1e2aea36c0147c1fd89d665cc550c14231563","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78aa3852458690e87b66ac9493d1e2aea36c0147c1fd89d665cc550c14231563","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78aa3852458690e87b66ac9493d1e2aea36c0147c1fd89d665cc550c14231563"}
{"level":"debug","ts":"2026-07-07T16:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78aa3852458690e87b66ac9493d1e2aea36c0147c1fd89d665cc550c14231563","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78aa3852458690e87b66ac9493d1e2aea36c0147c1fd89d665cc550c14231563"}
{"level":"debug","ts":"2026-07-07T16:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78aa3852458690e87b66ac9493d1e2aea36c0147c1fd89d665cc550c14231563","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:20:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:20:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78aa3852458690e87b66ac9493d1e2aea36c0147c1fd89d665cc550c14231563"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78aa3852458690e87b66ac9493d1e2aea36c0147c1fd89d665cc550c14231563","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78aa3852458690e87b66ac9493d1e2aea36c0147c1fd89d665cc550c14231563","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:20:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:20:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78aa3852458690e87b66ac9493d1e2aea36c0147c1fd89d665cc550c14231563","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e8d0ceec1fb8e75a2b8c504b54ab84af2bb4b71afeaa20d185a22b5c18213c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78aa3852458690e87b66ac9493d1e2aea36c0147c1fd89d665cc550c14231563","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78aa3852458690e87b66ac9493d1e2aea36c0147c1fd89d665cc550c14231563","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78aa3852458690e87b66ac9493d1e2aea36c0147c1fd89d665cc550c14231563"}
{"level":"debug","ts":"2026-07-07T16:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78aa3852458690e87b66ac9493d1e2aea36c0147c1fd89d665cc550c14231563","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:20:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:20:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78aa3852458690e87b66ac9493d1e2aea36c0147c1fd89d665cc550c14231563"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e8d0ceec1fb8e75a2b8c504b54ab84af2bb4b71afeaa20d185a22b5c18213c0"}
{"level":"info","ts":"2026-07-07T16:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78aa3852458690e87b66ac9493d1e2aea36c0147c1fd89d665cc550c14231563","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78aa3852458690e87b66ac9493d1e2aea36c0147c1fd89d665cc550c14231563","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:20:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:20:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78aa3852458690e87b66ac9493d1e2aea36c0147c1fd89d665cc550c14231563"}
{"level":"info","ts":"2026-07-07T16:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78aa3852458690e87b66ac9493d1e2aea36c0147c1fd89d665cc550c14231563","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78aa3852458690e87b66ac9493d1e2aea36c0147c1fd89d665cc550c14231563","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78aa3852458690e87b66ac9493d1e2aea36c0147c1fd89d665cc550c14231563","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78aa3852458690e87b66ac9493d1e2aea36c0147c1fd89d665cc550c14231563"}
{"level":"debug","ts":"2026-07-07T16:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78aa3852458690e87b66ac9493d1e2aea36c0147c1fd89d665cc550c14231563","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9f9be3d7c8ed815064283d76f387404d04d3787a0f4a7eb0ee5d8c4b39659a9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78aa3852458690e87b66ac9493d1e2aea36c0147c1fd89d665cc550c14231563"}
{"level":"debug","ts":"2026-07-07T16:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b057fea29aab48a542ba72fba8a30a8759e13a0914bbb6f617f01f703c5fda83","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9f9be3d7c8ed815064283d76f387404d04d3787a0f4a7eb0ee5d8c4b39659a9"}
{"level":"debug","ts":"2026-07-07T16:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78aa3852458690e87b66ac9493d1e2aea36c0147c1fd89d665cc550c14231563","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:20:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:20:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78aa3852458690e87b66ac9493d1e2aea36c0147c1fd89d665cc550c14231563"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b057fea29aab48a542ba72fba8a30a8759e13a0914bbb6f617f01f703c5fda83"}
{"level":"info","ts":"2026-07-07T16:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78aa3852458690e87b66ac9493d1e2aea36c0147c1fd89d665cc550c14231563","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78aa3852458690e87b66ac9493d1e2aea36c0147c1fd89d665cc550c14231563","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:20:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:20:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78aa3852458690e87b66ac9493d1e2aea36c0147c1fd89d665cc550c14231563","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78aa3852458690e87b66ac9493d1e2aea36c0147c1fd89d665cc550c14231563","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78aa3852458690e87b66ac9493d1e2aea36c0147c1fd89d665cc550c14231563","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78aa3852458690e87b66ac9493d1e2aea36c0147c1fd89d665cc550c14231563"}
{"level":"debug","ts":"2026-07-07T16:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78aa3852458690e87b66ac9493d1e2aea36c0147c1fd89d665cc550c14231563","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78aa3852458690e87b66ac9493d1e2aea36c0147c1fd89d665cc550c14231563"}
{"level":"debug","ts":"2026-07-07T16:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f8b52584c83ea84e170b58c7824346c700c775206e7277006ff1471ad231e3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:20:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:20:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f8b52584c83ea84e170b58c7824346c700c775206e7277006ff1471ad231e3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f8b52584c83ea84e170b58c7824346c700c775206e7277006ff1471ad231e3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b2ba7eb701a9c3a1ccda77cf264d45bc4b25926fd302e8e568e4a8d4a1d8bef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f8b52584c83ea84e170b58c7824346c700c775206e7277006ff1471ad231e3b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f8b52584c83ea84e170b58c7824346c700c775206e7277006ff1471ad231e3b"}
{"level":"debug","ts":"2026-07-07T16:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78aa3852458690e87b66ac9493d1e2aea36c0147c1fd89d665cc550c14231563","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:20:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:20:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78aa3852458690e87b66ac9493d1e2aea36c0147c1fd89d665cc550c14231563"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b2ba7eb701a9c3a1ccda77cf264d45bc4b25926fd302e8e568e4a8d4a1d8bef"}
{"level":"info","ts":"2026-07-07T16:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78aa3852458690e87b66ac9493d1e2aea36c0147c1fd89d665cc550c14231563","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe740d6fc7b2d2198dac07f335a22e1600fda73d6feb12d8c852c0568fee2f28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f8b52584c83ea84e170b58c7824346c700c775206e7277006ff1471ad231e3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78aa3852458690e87b66ac9493d1e2aea36c0147c1fd89d665cc550c14231563","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ff33a0204338fe25d7028ac4127a3edd3cccadd4219105675c06d66e177473d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f8b52584c83ea84e170b58c7824346c700c775206e7277006ff1471ad231e3b"}
{"level":"info","ts":"2026-07-07T16:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe740d6fc7b2d2198dac07f335a22e1600fda73d6feb12d8c852c0568fee2f28"}
{"level":"debug","ts":"2026-07-07T16:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f8b52584c83ea84e170b58c7824346c700c775206e7277006ff1471ad231e3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:20:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:20:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f8b52584c83ea84e170b58c7824346c700c775206e7277006ff1471ad231e3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f8b52584c83ea84e170b58c7824346c700c775206e7277006ff1471ad231e3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa9439c19319bc358b5861271ae9c5b13b5f6184ba86588d5cee5303919011c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f8b52584c83ea84e170b58c7824346c700c775206e7277006ff1471ad231e3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d62d32dbb011d2f7c6b27c2258eecc11171224936b8d6533e787a9c6adb11e8f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9fa2b1b7967b094b94df2cda61027cb7f7398fa32afa44e33b36771439703cbb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78aa3852458690e87b66ac9493d1e2aea36c0147c1fd89d665cc550c14231563"}
{"level":"info","ts":"2026-07-07T16:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ff33a0204338fe25d7028ac4127a3edd3cccadd4219105675c06d66e177473d"}
{"level":"debug","ts":"2026-07-07T16:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"720b119ef6cd26e8da493fe03bea89224645347d2376e3849b4382078c168d19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85661348386c0fea7b1da998d0d82b4855b0019f0a9e15bf3be7d09f67d0be5e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa9439c19319bc358b5861271ae9c5b13b5f6184ba86588d5cee5303919011c7"}
{"level":"debug","ts":"2026-07-07T16:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f491763020e7ea6dcc052f3a32f241b36b4c58e83b9494151b804909ee70aff","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f8b52584c83ea84e170b58c7824346c700c775206e7277006ff1471ad231e3b"}
{"level":"debug","ts":"2026-07-07T16:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e513592a541b25f8085edfc1d1293b97e873fe273e572c5469f4694937e5cec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d62d32dbb011d2f7c6b27c2258eecc11171224936b8d6533e787a9c6adb11e8f"}
{"level":"info","ts":"2026-07-07T16:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9fa2b1b7967b094b94df2cda61027cb7f7398fa32afa44e33b36771439703cbb"}
{"level":"info","ts":"2026-07-07T16:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/720b119ef6cd26e8da493fe03bea89224645347d2376e3849b4382078c168d19"}
{"level":"info","ts":"2026-07-07T16:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85661348386c0fea7b1da998d0d82b4855b0019f0a9e15bf3be7d09f67d0be5e"}
{"level":"info","ts":"2026-07-07T16:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f491763020e7ea6dcc052f3a32f241b36b4c58e83b9494151b804909ee70aff"}
{"level":"info","ts":"2026-07-07T16:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e513592a541b25f8085edfc1d1293b97e873fe273e572c5469f4694937e5cec"}
{"level":"info","ts":"2026-07-07T16:20:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2e957106-9e39-4982-92bd-f76b2b26fdd7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:58676","PortSpecifier":{"PortValue":58676}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2e957106-9e39-4982-92bd-f76b2b26fdd7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-9ac19f.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:20:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2e957106-9e39-4982-92bd-f76b2b26fdd7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:58676","PortSpecifier":{"PortValue":58676}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783441248,"nanos":368216892},"http":{"id":"2e957106-9e39-4982-92bd-f76b2b26fdd7","method":"POST","headers":{":authority":"e2e-shared-a-9ac19f.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:20:48Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2e957106-9e39-4982-92bd-f76b2b26fdd7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T16:20:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2e957106-9e39-4982-92bd-f76b2b26fdd7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f6a73c6c-303e-47e7-8a1a-2f23fec1b49d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2222897e-adbc-4372-aada-e7cf61fcb2a7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/13545484d307"]}}
{"level":"debug","ts":"2026-07-07T16:20:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2e957106-9e39-4982-92bd-f76b2b26fdd7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/13545484d307"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2222897e-adbc-4372-aada-e7cf61fcb2a7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f6a73c6c-303e-47e7-8a1a-2f23fec1b49d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d62d32dbb011d2f7c6b27c2258eecc11171224936b8d6533e787a9c6adb11e8f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-9ac19f.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:20:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e957106-9e39-4982-92bd-f76b2b26fdd7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:20:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e957106-9e39-4982-92bd-f76b2b26fdd7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:20:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e957106-9e39-4982-92bd-f76b2b26fdd7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9ac19f/rate-test-model-9ac19f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:20:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2e957106-9e39-4982-92bd-f76b2b26fdd7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T16:20:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2e957106-9e39-4982-92bd-f76b2b26fdd7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:20:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2e957106-9e39-4982-92bd-f76b2b26fdd7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T16:20:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2e957106-9e39-4982-92bd-f76b2b26fdd7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:20:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2e957106-9e39-4982-92bd-f76b2b26fdd7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:20:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"891587da-3d2b-4fe4-bce3-69d30f22049b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:38930","PortSpecifier":{"PortValue":38930}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"891587da-3d2b-4fe4-bce3-69d30f22049b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-132358.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:20:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"891587da-3d2b-4fe4-bce3-69d30f22049b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:38930","PortSpecifier":{"PortValue":38930}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783441248,"nanos":416047534},"http":{"id":"891587da-3d2b-4fe4-bce3-69d30f22049b","method":"POST","headers":{":authority":"e2e-shared-b-132358.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:20:48Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"891587da-3d2b-4fe4-bce3-69d30f22049b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T16:20:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"891587da-3d2b-4fe4-bce3-69d30f22049b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f6a73c6c-303e-47e7-8a1a-2f23fec1b49d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2222897e-adbc-4372-aada-e7cf61fcb2a7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/13545484d307"]}}
{"level":"debug","ts":"2026-07-07T16:20:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"891587da-3d2b-4fe4-bce3-69d30f22049b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/13545484d307"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2222897e-adbc-4372-aada-e7cf61fcb2a7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f6a73c6c-303e-47e7-8a1a-2f23fec1b49d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b057fea29aab48a542ba72fba8a30a8759e13a0914bbb6f617f01f703c5fda83"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-132358.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:20:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"891587da-3d2b-4fe4-bce3-69d30f22049b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:20:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"891587da-3d2b-4fe4-bce3-69d30f22049b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:20:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"891587da-3d2b-4fe4-bce3-69d30f22049b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-132358/rate-test-model-132358\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:20:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"891587da-3d2b-4fe4-bce3-69d30f22049b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T16:20:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"891587da-3d2b-4fe4-bce3-69d30f22049b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:20:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"891587da-3d2b-4fe4-bce3-69d30f22049b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T16:20:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"891587da-3d2b-4fe4-bce3-69d30f22049b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:20:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"891587da-3d2b-4fe4-bce3-69d30f22049b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:20:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"15cc4ac9-9fe9-954f-b396-6ba95ef95b0a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:58680","PortSpecifier":{"PortValue":58680}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"15cc4ac9-9fe9-954f-b396-6ba95ef95b0a","method":"POST","path":"/ai-tenant-e2e-shared-a-9ac19f/rate-test-model-9ac19f/v1/completions","host":"e2e-shared-a-9ac19f.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:20:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"15cc4ac9-9fe9-954f-b396-6ba95ef95b0a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:58680","PortSpecifier":{"PortValue":58680}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783441248,"nanos":462913980},"http":{"id":"15cc4ac9-9fe9-954f-b396-6ba95ef95b0a","method":"POST","headers":{":authority":"e2e-shared-a-9ac19f.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-9ac19f/rate-test-model-9ac19f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:20:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"15cc4ac9-9fe9-954f-b396-6ba95ef95b0a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1KPVZqvReV0kGdMHQ_8gaaA3ypehRwqyiGl4x3d4OKCW4Hv201JbhyJ22llYz"}
{"level":"debug","ts":"2026-07-07T16:20:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"15cc4ac9-9fe9-954f-b396-6ba95ef95b0a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9ac19f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1KPVZqvReV0kGdMHQ_8gaaA3ypehRwqyiGl4x3d4OKCW4Hv201JbhyJ22llYz\"}"}
{"level":"debug","ts":"2026-07-07T16:20:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"15cc4ac9-9fe9-954f-b396-6ba95ef95b0a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9ac19f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9ed1ebd2-5305-4771-9429-1fe6c1ccdfcd","keyName":"e2e-rate-a-d734a0","subscription":"e2e-rate-iso-a-d734a0","tenant":"e2e-shared-a-9ac19f","userId":"9ed1ebd2-5305-4771-9429-1fe6c1ccdfcd","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T16:20:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"15cc4ac9-9fe9-954f-b396-6ba95ef95b0a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-9ac19f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-9ac19f/rate-test-model-9ac19f\",\"requestedSubscription\":\"e2e-rate-iso-a-d734a0\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T16:20:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"15cc4ac9-9fe9-954f-b396-6ba95ef95b0a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9ac19f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-9ac19f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d734a0","namespace":"ai-tenant-e2e-shared-a-9ac19f","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T16:20:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"15cc4ac9-9fe9-954f-b396-6ba95ef95b0a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:20:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"15cc4ac9-9fe9-954f-b396-6ba95ef95b0a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:20:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"15cc4ac9-9fe9-954f-b396-6ba95ef95b0a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:20:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"15cc4ac9-9fe9-954f-b396-6ba95ef95b0a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9ac19f/rate-test-model-9ac19f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:20:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"15cc4ac9-9fe9-954f-b396-6ba95ef95b0a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:20:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"15cc4ac9-9fe9-954f-b396-6ba95ef95b0a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:20:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"15cc4ac9-9fe9-954f-b396-6ba95ef95b0a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d734a0"}
{"level":"debug","ts":"2026-07-07T16:20:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"15cc4ac9-9fe9-954f-b396-6ba95ef95b0a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T16:20:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"15cc4ac9-9fe9-954f-b396-6ba95ef95b0a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9ed1ebd2-5305-4771-9429-1fe6c1ccdfcd","keyName":"e2e-rate-a-d734a0","selected_subscription":"e2e-rate-iso-a-d734a0","selected_subscription_key":"ai-tenant-e2e-shared-a-9ac19f/e2e-rate-iso-a-d734a0@ai-tenant-e2e-shared-a-9ac19f/rate-test-model-9ac19f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-9ac19f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d734a0","namespace":"ai-tenant-e2e-shared-a-9ac19f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T16:20:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"15cc4ac9-9fe9-954f-b396-6ba95ef95b0a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:20:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"15cc4ac9-9fe9-954f-b396-6ba95ef95b0a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:20:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2af1420b-6b0c-48cd-84cc-e1c78f3fb7e5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:58696","PortSpecifier":{"PortValue":58696}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2af1420b-6b0c-48cd-84cc-e1c78f3fb7e5","method":"POST","path":"/ai-tenant-e2e-shared-a-9ac19f/rate-test-model-9ac19f/v1/completions","host":"e2e-shared-a-9ac19f.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:20:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2af1420b-6b0c-48cd-84cc-e1c78f3fb7e5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:58696","PortSpecifier":{"PortValue":58696}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783441249,"nanos":524791586},"http":{"id":"2af1420b-6b0c-48cd-84cc-e1c78f3fb7e5","method":"POST","headers":{":authority":"e2e-shared-a-9ac19f.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-9ac19f/rate-test-model-9ac19f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:20:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2af1420b-6b0c-48cd-84cc-e1c78f3fb7e5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1KPVZqvReV0kGdMHQ_8gaaA3ypehRwqyiGl4x3d4OKCW4Hv201JbhyJ22llYz"}
{"level":"debug","ts":"2026-07-07T16:20:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2af1420b-6b0c-48cd-84cc-e1c78f3fb7e5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9ac19f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1KPVZqvReV0kGdMHQ_8gaaA3ypehRwqyiGl4x3d4OKCW4Hv201JbhyJ22llYz\"}"}
{"level":"debug","ts":"2026-07-07T16:20:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2af1420b-6b0c-48cd-84cc-e1c78f3fb7e5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9ac19f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9ed1ebd2-5305-4771-9429-1fe6c1ccdfcd","keyName":"e2e-rate-a-d734a0","subscription":"e2e-rate-iso-a-d734a0","tenant":"e2e-shared-a-9ac19f","userId":"9ed1ebd2-5305-4771-9429-1fe6c1ccdfcd","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T16:20:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2af1420b-6b0c-48cd-84cc-e1c78f3fb7e5","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-9ac19f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-9ac19f/rate-test-model-9ac19f\",\"requestedSubscription\":\"e2e-rate-iso-a-d734a0\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T16:20:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2af1420b-6b0c-48cd-84cc-e1c78f3fb7e5","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9ac19f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-9ac19f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d734a0","namespace":"ai-tenant-e2e-shared-a-9ac19f","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T16:20:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2af1420b-6b0c-48cd-84cc-e1c78f3fb7e5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:20:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2af1420b-6b0c-48cd-84cc-e1c78f3fb7e5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:20:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2af1420b-6b0c-48cd-84cc-e1c78f3fb7e5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:20:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2af1420b-6b0c-48cd-84cc-e1c78f3fb7e5","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:20:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2af1420b-6b0c-48cd-84cc-e1c78f3fb7e5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9ac19f/rate-test-model-9ac19f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:20:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2af1420b-6b0c-48cd-84cc-e1c78f3fb7e5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d734a0"}
{"level":"debug","ts":"2026-07-07T16:20:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2af1420b-6b0c-48cd-84cc-e1c78f3fb7e5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:20:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2af1420b-6b0c-48cd-84cc-e1c78f3fb7e5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T16:20:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2af1420b-6b0c-48cd-84cc-e1c78f3fb7e5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9ed1ebd2-5305-4771-9429-1fe6c1ccdfcd","keyName":"e2e-rate-a-d734a0","selected_subscription":"e2e-rate-iso-a-d734a0","selected_subscription_key":"ai-tenant-e2e-shared-a-9ac19f/e2e-rate-iso-a-d734a0@ai-tenant-e2e-shared-a-9ac19f/rate-test-model-9ac19f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-9ac19f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d734a0","namespace":"ai-tenant-e2e-shared-a-9ac19f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T16:20:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2af1420b-6b0c-48cd-84cc-e1c78f3fb7e5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:20:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2af1420b-6b0c-48cd-84cc-e1c78f3fb7e5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:20:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c88166b7-9411-4fc7-b7a3-e66e902c1912","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:58698","PortSpecifier":{"PortValue":58698}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c88166b7-9411-4fc7-b7a3-e66e902c1912","method":"POST","path":"/ai-tenant-e2e-shared-a-9ac19f/rate-test-model-9ac19f/v1/completions","host":"e2e-shared-a-9ac19f.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:20:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c88166b7-9411-4fc7-b7a3-e66e902c1912","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:58698","PortSpecifier":{"PortValue":58698}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783441250,"nanos":566442566},"http":{"id":"c88166b7-9411-4fc7-b7a3-e66e902c1912","method":"POST","headers":{":authority":"e2e-shared-a-9ac19f.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-9ac19f/rate-test-model-9ac19f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:20:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c88166b7-9411-4fc7-b7a3-e66e902c1912","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1KPVZqvReV0kGdMHQ_8gaaA3ypehRwqyiGl4x3d4OKCW4Hv201JbhyJ22llYz"}
{"level":"debug","ts":"2026-07-07T16:20:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c88166b7-9411-4fc7-b7a3-e66e902c1912","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9ac19f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1KPVZqvReV0kGdMHQ_8gaaA3ypehRwqyiGl4x3d4OKCW4Hv201JbhyJ22llYz\"}"}
{"level":"debug","ts":"2026-07-07T16:20:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c88166b7-9411-4fc7-b7a3-e66e902c1912","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9ac19f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9ed1ebd2-5305-4771-9429-1fe6c1ccdfcd","keyName":"e2e-rate-a-d734a0","subscription":"e2e-rate-iso-a-d734a0","tenant":"e2e-shared-a-9ac19f","userId":"9ed1ebd2-5305-4771-9429-1fe6c1ccdfcd","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T16:20:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c88166b7-9411-4fc7-b7a3-e66e902c1912","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-9ac19f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-9ac19f/rate-test-model-9ac19f\",\"requestedSubscription\":\"e2e-rate-iso-a-d734a0\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T16:20:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c88166b7-9411-4fc7-b7a3-e66e902c1912","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9ac19f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-9ac19f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d734a0","namespace":"ai-tenant-e2e-shared-a-9ac19f","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T16:20:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c88166b7-9411-4fc7-b7a3-e66e902c1912","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:20:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c88166b7-9411-4fc7-b7a3-e66e902c1912","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:20:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c88166b7-9411-4fc7-b7a3-e66e902c1912","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:20:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c88166b7-9411-4fc7-b7a3-e66e902c1912","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9ac19f/rate-test-model-9ac19f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:20:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c88166b7-9411-4fc7-b7a3-e66e902c1912","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:20:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c88166b7-9411-4fc7-b7a3-e66e902c1912","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T16:20:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c88166b7-9411-4fc7-b7a3-e66e902c1912","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:20:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c88166b7-9411-4fc7-b7a3-e66e902c1912","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d734a0"}
{"level":"debug","ts":"2026-07-07T16:20:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c88166b7-9411-4fc7-b7a3-e66e902c1912","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9ed1ebd2-5305-4771-9429-1fe6c1ccdfcd","keyName":"e2e-rate-a-d734a0","selected_subscription":"e2e-rate-iso-a-d734a0","selected_subscription_key":"ai-tenant-e2e-shared-a-9ac19f/e2e-rate-iso-a-d734a0@ai-tenant-e2e-shared-a-9ac19f/rate-test-model-9ac19f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-9ac19f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d734a0","namespace":"ai-tenant-e2e-shared-a-9ac19f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T16:20:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c88166b7-9411-4fc7-b7a3-e66e902c1912","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:20:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c88166b7-9411-4fc7-b7a3-e66e902c1912","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:20:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"82a3b900-9e52-4039-933d-a98678f94775","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:34010","PortSpecifier":{"PortValue":34010}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"82a3b900-9e52-4039-933d-a98678f94775","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-9ac19f.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:20:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"82a3b900-9e52-4039-933d-a98678f94775","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:34010","PortSpecifier":{"PortValue":34010}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783441259,"nanos":339840915},"http":{"id":"82a3b900-9e52-4039-933d-a98678f94775","method":"POST","headers":{":authority":"e2e-shared-a-9ac19f.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:20:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"82a3b900-9e52-4039-933d-a98678f94775","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T16:20:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"82a3b900-9e52-4039-933d-a98678f94775","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f6a73c6c-303e-47e7-8a1a-2f23fec1b49d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2222897e-adbc-4372-aada-e7cf61fcb2a7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/13545484d307"]}}
{"level":"debug","ts":"2026-07-07T16:20:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"82a3b900-9e52-4039-933d-a98678f94775","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/13545484d307"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2222897e-adbc-4372-aada-e7cf61fcb2a7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f6a73c6c-303e-47e7-8a1a-2f23fec1b49d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d62d32dbb011d2f7c6b27c2258eecc11171224936b8d6533e787a9c6adb11e8f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-9ac19f.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:20:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"82a3b900-9e52-4039-933d-a98678f94775","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:20:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"82a3b900-9e52-4039-933d-a98678f94775","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:20:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"82a3b900-9e52-4039-933d-a98678f94775","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9ac19f/rate-test-model-9ac19f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:20:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"82a3b900-9e52-4039-933d-a98678f94775","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T16:20:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"82a3b900-9e52-4039-933d-a98678f94775","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:20:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"82a3b900-9e52-4039-933d-a98678f94775","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T16:20:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"82a3b900-9e52-4039-933d-a98678f94775","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:20:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"82a3b900-9e52-4039-933d-a98678f94775","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:20:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"344387e9-321d-4bd8-afbf-a8119e15a973","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:59914","PortSpecifier":{"PortValue":59914}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"344387e9-321d-4bd8-afbf-a8119e15a973","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-132358.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:20:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"344387e9-321d-4bd8-afbf-a8119e15a973","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:59914","PortSpecifier":{"PortValue":59914}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783441259,"nanos":377116528},"http":{"id":"344387e9-321d-4bd8-afbf-a8119e15a973","method":"POST","headers":{":authority":"e2e-shared-b-132358.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:20:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"344387e9-321d-4bd8-afbf-a8119e15a973","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T16:20:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"344387e9-321d-4bd8-afbf-a8119e15a973","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f6a73c6c-303e-47e7-8a1a-2f23fec1b49d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2222897e-adbc-4372-aada-e7cf61fcb2a7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/13545484d307"]}}
{"level":"debug","ts":"2026-07-07T16:20:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"344387e9-321d-4bd8-afbf-a8119e15a973","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/13545484d307"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2222897e-adbc-4372-aada-e7cf61fcb2a7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f6a73c6c-303e-47e7-8a1a-2f23fec1b49d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b057fea29aab48a542ba72fba8a30a8759e13a0914bbb6f617f01f703c5fda83"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-132358.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:20:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"344387e9-321d-4bd8-afbf-a8119e15a973","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:20:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"344387e9-321d-4bd8-afbf-a8119e15a973","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:20:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"344387e9-321d-4bd8-afbf-a8119e15a973","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-132358/rate-test-model-132358\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:20:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"344387e9-321d-4bd8-afbf-a8119e15a973","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T16:20:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"344387e9-321d-4bd8-afbf-a8119e15a973","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:20:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"344387e9-321d-4bd8-afbf-a8119e15a973","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T16:20:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"344387e9-321d-4bd8-afbf-a8119e15a973","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:20:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"344387e9-321d-4bd8-afbf-a8119e15a973","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:20:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2c19cd3e-e53b-408b-96eb-aaa7db8a9d04","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:34012","PortSpecifier":{"PortValue":34012}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2c19cd3e-e53b-408b-96eb-aaa7db8a9d04","method":"POST","path":"/ai-tenant-e2e-shared-a-9ac19f/rate-test-model-9ac19f/v1/completions","host":"e2e-shared-a-9ac19f.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:20:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2c19cd3e-e53b-408b-96eb-aaa7db8a9d04","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:34012","PortSpecifier":{"PortValue":34012}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783441259,"nanos":417933752},"http":{"id":"2c19cd3e-e53b-408b-96eb-aaa7db8a9d04","method":"POST","headers":{":authority":"e2e-shared-a-9ac19f.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-9ac19f/rate-test-model-9ac19f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:20:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2c19cd3e-e53b-408b-96eb-aaa7db8a9d04","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-4mOww8MEb1xgXGah_66O1z5MxR9im5uaK0HEkbll2djGCh7VOWkBSe8033dp"}
{"level":"debug","ts":"2026-07-07T16:20:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2c19cd3e-e53b-408b-96eb-aaa7db8a9d04","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9ac19f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-4mOww8MEb1xgXGah_66O1z5MxR9im5uaK0HEkbll2djGCh7VOWkBSe8033dp\"}"}
{"level":"debug","ts":"2026-07-07T16:20:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2c19cd3e-e53b-408b-96eb-aaa7db8a9d04","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9ac19f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"98b7028b-a2a8-4107-9dea-67e866ba66c9","keyName":"e2e-rate-a-227b9f","subscription":"e2e-rate-iso-a-227b9f","tenant":"e2e-shared-a-9ac19f","userId":"98b7028b-a2a8-4107-9dea-67e866ba66c9","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T16:20:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2c19cd3e-e53b-408b-96eb-aaa7db8a9d04","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-9ac19f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-9ac19f/rate-test-model-9ac19f\",\"requestedSubscription\":\"e2e-rate-iso-a-227b9f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T16:20:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2c19cd3e-e53b-408b-96eb-aaa7db8a9d04","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9ac19f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-9ac19f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-227b9f","namespace":"ai-tenant-e2e-shared-a-9ac19f","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T16:20:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2c19cd3e-e53b-408b-96eb-aaa7db8a9d04","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:20:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2c19cd3e-e53b-408b-96eb-aaa7db8a9d04","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:20:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2c19cd3e-e53b-408b-96eb-aaa7db8a9d04","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:20:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2c19cd3e-e53b-408b-96eb-aaa7db8a9d04","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9ac19f/rate-test-model-9ac19f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:20:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2c19cd3e-e53b-408b-96eb-aaa7db8a9d04","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:20:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2c19cd3e-e53b-408b-96eb-aaa7db8a9d04","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:20:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2c19cd3e-e53b-408b-96eb-aaa7db8a9d04","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T16:20:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2c19cd3e-e53b-408b-96eb-aaa7db8a9d04","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-227b9f"}
{"level":"debug","ts":"2026-07-07T16:20:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2c19cd3e-e53b-408b-96eb-aaa7db8a9d04","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"98b7028b-a2a8-4107-9dea-67e866ba66c9","keyName":"e2e-rate-a-227b9f","selected_subscription":"e2e-rate-iso-a-227b9f","selected_subscription_key":"ai-tenant-e2e-shared-a-9ac19f/e2e-rate-iso-a-227b9f@ai-tenant-e2e-shared-a-9ac19f/rate-test-model-9ac19f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-9ac19f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-227b9f","namespace":"ai-tenant-e2e-shared-a-9ac19f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T16:20:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2c19cd3e-e53b-408b-96eb-aaa7db8a9d04","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:20:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2c19cd3e-e53b-408b-96eb-aaa7db8a9d04","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:21:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e14028f6-8fbf-4b20-94ec-07bfea6e22b9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:34014","PortSpecifier":{"PortValue":34014}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e14028f6-8fbf-4b20-94ec-07bfea6e22b9","method":"POST","path":"/ai-tenant-e2e-shared-a-9ac19f/rate-test-model-9ac19f/v1/completions","host":"e2e-shared-a-9ac19f.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:21:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e14028f6-8fbf-4b20-94ec-07bfea6e22b9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:34014","PortSpecifier":{"PortValue":34014}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783441260,"nanos":456970295},"http":{"id":"e14028f6-8fbf-4b20-94ec-07bfea6e22b9","method":"POST","headers":{":authority":"e2e-shared-a-9ac19f.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-9ac19f/rate-test-model-9ac19f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:21:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e14028f6-8fbf-4b20-94ec-07bfea6e22b9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-4mOww8MEb1xgXGah_66O1z5MxR9im5uaK0HEkbll2djGCh7VOWkBSe8033dp"}
{"level":"debug","ts":"2026-07-07T16:21:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e14028f6-8fbf-4b20-94ec-07bfea6e22b9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9ac19f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-4mOww8MEb1xgXGah_66O1z5MxR9im5uaK0HEkbll2djGCh7VOWkBSe8033dp\"}"}
{"level":"debug","ts":"2026-07-07T16:21:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e14028f6-8fbf-4b20-94ec-07bfea6e22b9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9ac19f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"98b7028b-a2a8-4107-9dea-67e866ba66c9","keyName":"e2e-rate-a-227b9f","subscription":"e2e-rate-iso-a-227b9f","tenant":"e2e-shared-a-9ac19f","userId":"98b7028b-a2a8-4107-9dea-67e866ba66c9","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T16:21:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e14028f6-8fbf-4b20-94ec-07bfea6e22b9","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-9ac19f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-9ac19f/rate-test-model-9ac19f\",\"requestedSubscription\":\"e2e-rate-iso-a-227b9f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T16:21:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e14028f6-8fbf-4b20-94ec-07bfea6e22b9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9ac19f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-9ac19f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-227b9f","namespace":"ai-tenant-e2e-shared-a-9ac19f","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T16:21:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e14028f6-8fbf-4b20-94ec-07bfea6e22b9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:21:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e14028f6-8fbf-4b20-94ec-07bfea6e22b9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:21:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e14028f6-8fbf-4b20-94ec-07bfea6e22b9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:21:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e14028f6-8fbf-4b20-94ec-07bfea6e22b9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:21:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e14028f6-8fbf-4b20-94ec-07bfea6e22b9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9ac19f/rate-test-model-9ac19f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:21:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e14028f6-8fbf-4b20-94ec-07bfea6e22b9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:21:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e14028f6-8fbf-4b20-94ec-07bfea6e22b9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-227b9f"}
{"level":"debug","ts":"2026-07-07T16:21:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e14028f6-8fbf-4b20-94ec-07bfea6e22b9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T16:21:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e14028f6-8fbf-4b20-94ec-07bfea6e22b9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"98b7028b-a2a8-4107-9dea-67e866ba66c9","keyName":"e2e-rate-a-227b9f","selected_subscription":"e2e-rate-iso-a-227b9f","selected_subscription_key":"ai-tenant-e2e-shared-a-9ac19f/e2e-rate-iso-a-227b9f@ai-tenant-e2e-shared-a-9ac19f/rate-test-model-9ac19f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-9ac19f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-227b9f","namespace":"ai-tenant-e2e-shared-a-9ac19f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T16:21:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e14028f6-8fbf-4b20-94ec-07bfea6e22b9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:21:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e14028f6-8fbf-4b20-94ec-07bfea6e22b9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:21:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e29a6b59-8ab9-415f-9ae7-9ad0237187b5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:34024","PortSpecifier":{"PortValue":34024}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e29a6b59-8ab9-415f-9ae7-9ad0237187b5","method":"POST","path":"/ai-tenant-e2e-shared-a-9ac19f/rate-test-model-9ac19f/v1/completions","host":"e2e-shared-a-9ac19f.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:21:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e29a6b59-8ab9-415f-9ae7-9ad0237187b5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:34024","PortSpecifier":{"PortValue":34024}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783441261,"nanos":495232876},"http":{"id":"e29a6b59-8ab9-415f-9ae7-9ad0237187b5","method":"POST","headers":{":authority":"e2e-shared-a-9ac19f.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-9ac19f/rate-test-model-9ac19f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:21:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e29a6b59-8ab9-415f-9ae7-9ad0237187b5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-4mOww8MEb1xgXGah_66O1z5MxR9im5uaK0HEkbll2djGCh7VOWkBSe8033dp"}
{"level":"debug","ts":"2026-07-07T16:21:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e29a6b59-8ab9-415f-9ae7-9ad0237187b5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9ac19f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-4mOww8MEb1xgXGah_66O1z5MxR9im5uaK0HEkbll2djGCh7VOWkBSe8033dp\"}"}
{"level":"debug","ts":"2026-07-07T16:21:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e29a6b59-8ab9-415f-9ae7-9ad0237187b5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9ac19f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"98b7028b-a2a8-4107-9dea-67e866ba66c9","keyName":"e2e-rate-a-227b9f","subscription":"e2e-rate-iso-a-227b9f","tenant":"e2e-shared-a-9ac19f","userId":"98b7028b-a2a8-4107-9dea-67e866ba66c9","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T16:21:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e29a6b59-8ab9-415f-9ae7-9ad0237187b5","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-9ac19f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-9ac19f/rate-test-model-9ac19f\",\"requestedSubscription\":\"e2e-rate-iso-a-227b9f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T16:21:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e29a6b59-8ab9-415f-9ae7-9ad0237187b5","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9ac19f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-9ac19f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-227b9f","namespace":"ai-tenant-e2e-shared-a-9ac19f","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T16:21:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e29a6b59-8ab9-415f-9ae7-9ad0237187b5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:21:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e29a6b59-8ab9-415f-9ae7-9ad0237187b5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:21:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e29a6b59-8ab9-415f-9ae7-9ad0237187b5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:21:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e29a6b59-8ab9-415f-9ae7-9ad0237187b5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9ac19f/rate-test-model-9ac19f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:21:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e29a6b59-8ab9-415f-9ae7-9ad0237187b5","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:21:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e29a6b59-8ab9-415f-9ae7-9ad0237187b5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:21:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e29a6b59-8ab9-415f-9ae7-9ad0237187b5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T16:21:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e29a6b59-8ab9-415f-9ae7-9ad0237187b5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-227b9f"}
{"level":"debug","ts":"2026-07-07T16:21:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e29a6b59-8ab9-415f-9ae7-9ad0237187b5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"98b7028b-a2a8-4107-9dea-67e866ba66c9","keyName":"e2e-rate-a-227b9f","selected_subscription":"e2e-rate-iso-a-227b9f","selected_subscription_key":"ai-tenant-e2e-shared-a-9ac19f/e2e-rate-iso-a-227b9f@ai-tenant-e2e-shared-a-9ac19f/rate-test-model-9ac19f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-9ac19f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-227b9f","namespace":"ai-tenant-e2e-shared-a-9ac19f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T16:21:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e29a6b59-8ab9-415f-9ae7-9ad0237187b5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:21:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e29a6b59-8ab9-415f-9ae7-9ad0237187b5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:21:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"116f8fb6-4bd9-4cbe-bc41-912730b26820","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:34026","PortSpecifier":{"PortValue":34026}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"116f8fb6-4bd9-4cbe-bc41-912730b26820","method":"POST","path":"/ai-tenant-e2e-shared-a-9ac19f/rate-test-model-9ac19f/v1/completions","host":"e2e-shared-a-9ac19f.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:21:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"116f8fb6-4bd9-4cbe-bc41-912730b26820","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:34026","PortSpecifier":{"PortValue":34026}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783441262,"nanos":532711018},"http":{"id":"116f8fb6-4bd9-4cbe-bc41-912730b26820","method":"POST","headers":{":authority":"e2e-shared-a-9ac19f.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-9ac19f/rate-test-model-9ac19f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:21:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"116f8fb6-4bd9-4cbe-bc41-912730b26820","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-4mOww8MEb1xgXGah_66O1z5MxR9im5uaK0HEkbll2djGCh7VOWkBSe8033dp"}
{"level":"debug","ts":"2026-07-07T16:21:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"116f8fb6-4bd9-4cbe-bc41-912730b26820","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9ac19f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-4mOww8MEb1xgXGah_66O1z5MxR9im5uaK0HEkbll2djGCh7VOWkBSe8033dp\"}"}
{"level":"debug","ts":"2026-07-07T16:21:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"116f8fb6-4bd9-4cbe-bc41-912730b26820","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9ac19f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"98b7028b-a2a8-4107-9dea-67e866ba66c9","keyName":"e2e-rate-a-227b9f","subscription":"e2e-rate-iso-a-227b9f","tenant":"e2e-shared-a-9ac19f","userId":"98b7028b-a2a8-4107-9dea-67e866ba66c9","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T16:21:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"116f8fb6-4bd9-4cbe-bc41-912730b26820","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-9ac19f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-9ac19f/rate-test-model-9ac19f\",\"requestedSubscription\":\"e2e-rate-iso-a-227b9f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T16:21:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"116f8fb6-4bd9-4cbe-bc41-912730b26820","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9ac19f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-9ac19f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-227b9f","namespace":"ai-tenant-e2e-shared-a-9ac19f","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T16:21:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"116f8fb6-4bd9-4cbe-bc41-912730b26820","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:21:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"116f8fb6-4bd9-4cbe-bc41-912730b26820","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:21:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"116f8fb6-4bd9-4cbe-bc41-912730b26820","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:21:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"116f8fb6-4bd9-4cbe-bc41-912730b26820","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9ac19f/rate-test-model-9ac19f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:21:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"116f8fb6-4bd9-4cbe-bc41-912730b26820","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:21:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"116f8fb6-4bd9-4cbe-bc41-912730b26820","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:21:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"116f8fb6-4bd9-4cbe-bc41-912730b26820","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-227b9f"}
{"level":"debug","ts":"2026-07-07T16:21:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"116f8fb6-4bd9-4cbe-bc41-912730b26820","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T16:21:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"116f8fb6-4bd9-4cbe-bc41-912730b26820","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"98b7028b-a2a8-4107-9dea-67e866ba66c9","keyName":"e2e-rate-a-227b9f","selected_subscription":"e2e-rate-iso-a-227b9f","selected_subscription_key":"ai-tenant-e2e-shared-a-9ac19f/e2e-rate-iso-a-227b9f@ai-tenant-e2e-shared-a-9ac19f/rate-test-model-9ac19f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-9ac19f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-227b9f","namespace":"ai-tenant-e2e-shared-a-9ac19f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T16:21:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"116f8fb6-4bd9-4cbe-bc41-912730b26820","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:21:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"116f8fb6-4bd9-4cbe-bc41-912730b26820","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:21:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"219d8704-5d4f-4a5f-b5f1-7af65eecd672","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:34034","PortSpecifier":{"PortValue":34034}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"219d8704-5d4f-4a5f-b5f1-7af65eecd672","method":"POST","path":"/ai-tenant-e2e-shared-a-9ac19f/rate-test-model-9ac19f/v1/completions","host":"e2e-shared-a-9ac19f.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:21:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"219d8704-5d4f-4a5f-b5f1-7af65eecd672","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:34034","PortSpecifier":{"PortValue":34034}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783441263,"nanos":570174178},"http":{"id":"219d8704-5d4f-4a5f-b5f1-7af65eecd672","method":"POST","headers":{":authority":"e2e-shared-a-9ac19f.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-9ac19f/rate-test-model-9ac19f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:21:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"219d8704-5d4f-4a5f-b5f1-7af65eecd672","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-4mOww8MEb1xgXGah_66O1z5MxR9im5uaK0HEkbll2djGCh7VOWkBSe8033dp"}
{"level":"debug","ts":"2026-07-07T16:21:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"219d8704-5d4f-4a5f-b5f1-7af65eecd672","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9ac19f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-4mOww8MEb1xgXGah_66O1z5MxR9im5uaK0HEkbll2djGCh7VOWkBSe8033dp\"}"}
{"level":"debug","ts":"2026-07-07T16:21:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"219d8704-5d4f-4a5f-b5f1-7af65eecd672","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9ac19f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"98b7028b-a2a8-4107-9dea-67e866ba66c9","keyName":"e2e-rate-a-227b9f","subscription":"e2e-rate-iso-a-227b9f","tenant":"e2e-shared-a-9ac19f","userId":"98b7028b-a2a8-4107-9dea-67e866ba66c9","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T16:21:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"219d8704-5d4f-4a5f-b5f1-7af65eecd672","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-9ac19f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-9ac19f/rate-test-model-9ac19f\",\"requestedSubscription\":\"e2e-rate-iso-a-227b9f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T16:21:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"219d8704-5d4f-4a5f-b5f1-7af65eecd672","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9ac19f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-9ac19f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-227b9f","namespace":"ai-tenant-e2e-shared-a-9ac19f","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T16:21:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"219d8704-5d4f-4a5f-b5f1-7af65eecd672","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:21:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"219d8704-5d4f-4a5f-b5f1-7af65eecd672","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:21:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"219d8704-5d4f-4a5f-b5f1-7af65eecd672","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:21:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"219d8704-5d4f-4a5f-b5f1-7af65eecd672","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:21:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"219d8704-5d4f-4a5f-b5f1-7af65eecd672","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9ac19f/rate-test-model-9ac19f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:21:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"219d8704-5d4f-4a5f-b5f1-7af65eecd672","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:21:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"219d8704-5d4f-4a5f-b5f1-7af65eecd672","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-227b9f"}
{"level":"debug","ts":"2026-07-07T16:21:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"219d8704-5d4f-4a5f-b5f1-7af65eecd672","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T16:21:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"219d8704-5d4f-4a5f-b5f1-7af65eecd672","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"98b7028b-a2a8-4107-9dea-67e866ba66c9","keyName":"e2e-rate-a-227b9f","selected_subscription":"e2e-rate-iso-a-227b9f","selected_subscription_key":"ai-tenant-e2e-shared-a-9ac19f/e2e-rate-iso-a-227b9f@ai-tenant-e2e-shared-a-9ac19f/rate-test-model-9ac19f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-9ac19f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-227b9f","namespace":"ai-tenant-e2e-shared-a-9ac19f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T16:21:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"219d8704-5d4f-4a5f-b5f1-7af65eecd672","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:21:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"219d8704-5d4f-4a5f-b5f1-7af65eecd672","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:21:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cd1b3587-848f-4a85-9319-167ba1a3cce0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:34044","PortSpecifier":{"PortValue":34044}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cd1b3587-848f-4a85-9319-167ba1a3cce0","method":"POST","path":"/ai-tenant-e2e-shared-a-9ac19f/rate-test-model-9ac19f/v1/completions","host":"e2e-shared-a-9ac19f.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:21:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cd1b3587-848f-4a85-9319-167ba1a3cce0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:34044","PortSpecifier":{"PortValue":34044}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783441264,"nanos":608991346},"http":{"id":"cd1b3587-848f-4a85-9319-167ba1a3cce0","method":"POST","headers":{":authority":"e2e-shared-a-9ac19f.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-9ac19f/rate-test-model-9ac19f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:21:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cd1b3587-848f-4a85-9319-167ba1a3cce0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-4mOww8MEb1xgXGah_66O1z5MxR9im5uaK0HEkbll2djGCh7VOWkBSe8033dp"}
{"level":"debug","ts":"2026-07-07T16:21:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cd1b3587-848f-4a85-9319-167ba1a3cce0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9ac19f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-4mOww8MEb1xgXGah_66O1z5MxR9im5uaK0HEkbll2djGCh7VOWkBSe8033dp\"}"}
{"level":"debug","ts":"2026-07-07T16:21:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cd1b3587-848f-4a85-9319-167ba1a3cce0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9ac19f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"98b7028b-a2a8-4107-9dea-67e866ba66c9","keyName":"e2e-rate-a-227b9f","subscription":"e2e-rate-iso-a-227b9f","tenant":"e2e-shared-a-9ac19f","userId":"98b7028b-a2a8-4107-9dea-67e866ba66c9","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T16:21:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cd1b3587-848f-4a85-9319-167ba1a3cce0","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-9ac19f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-9ac19f/rate-test-model-9ac19f\",\"requestedSubscription\":\"e2e-rate-iso-a-227b9f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T16:21:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cd1b3587-848f-4a85-9319-167ba1a3cce0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9ac19f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-9ac19f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-227b9f","namespace":"ai-tenant-e2e-shared-a-9ac19f","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T16:21:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cd1b3587-848f-4a85-9319-167ba1a3cce0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:21:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd1b3587-848f-4a85-9319-167ba1a3cce0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:21:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd1b3587-848f-4a85-9319-167ba1a3cce0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:21:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd1b3587-848f-4a85-9319-167ba1a3cce0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9ac19f/rate-test-model-9ac19f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:21:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd1b3587-848f-4a85-9319-167ba1a3cce0","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:21:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cd1b3587-848f-4a85-9319-167ba1a3cce0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:21:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cd1b3587-848f-4a85-9319-167ba1a3cce0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-227b9f"}
{"level":"debug","ts":"2026-07-07T16:21:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cd1b3587-848f-4a85-9319-167ba1a3cce0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T16:21:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cd1b3587-848f-4a85-9319-167ba1a3cce0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"98b7028b-a2a8-4107-9dea-67e866ba66c9","keyName":"e2e-rate-a-227b9f","selected_subscription":"e2e-rate-iso-a-227b9f","selected_subscription_key":"ai-tenant-e2e-shared-a-9ac19f/e2e-rate-iso-a-227b9f@ai-tenant-e2e-shared-a-9ac19f/rate-test-model-9ac19f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-9ac19f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-227b9f","namespace":"ai-tenant-e2e-shared-a-9ac19f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T16:21:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cd1b3587-848f-4a85-9319-167ba1a3cce0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:21:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cd1b3587-848f-4a85-9319-167ba1a3cce0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:21:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cc6995ae-a731-46b3-8168-553505f36ee5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:34050","PortSpecifier":{"PortValue":34050}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cc6995ae-a731-46b3-8168-553505f36ee5","method":"POST","path":"/ai-tenant-e2e-shared-a-9ac19f/rate-test-model-9ac19f/v1/completions","host":"e2e-shared-a-9ac19f.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:21:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cc6995ae-a731-46b3-8168-553505f36ee5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:34050","PortSpecifier":{"PortValue":34050}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783441265,"nanos":672930068},"http":{"id":"cc6995ae-a731-46b3-8168-553505f36ee5","method":"POST","headers":{":authority":"e2e-shared-a-9ac19f.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-9ac19f/rate-test-model-9ac19f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:21:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cc6995ae-a731-46b3-8168-553505f36ee5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-4mOww8MEb1xgXGah_66O1z5MxR9im5uaK0HEkbll2djGCh7VOWkBSe8033dp"}
{"level":"debug","ts":"2026-07-07T16:21:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cc6995ae-a731-46b3-8168-553505f36ee5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9ac19f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-4mOww8MEb1xgXGah_66O1z5MxR9im5uaK0HEkbll2djGCh7VOWkBSe8033dp\"}"}
{"level":"debug","ts":"2026-07-07T16:21:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cc6995ae-a731-46b3-8168-553505f36ee5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9ac19f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"98b7028b-a2a8-4107-9dea-67e866ba66c9","keyName":"e2e-rate-a-227b9f","subscription":"e2e-rate-iso-a-227b9f","tenant":"e2e-shared-a-9ac19f","userId":"98b7028b-a2a8-4107-9dea-67e866ba66c9","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T16:21:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cc6995ae-a731-46b3-8168-553505f36ee5","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-9ac19f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-9ac19f/rate-test-model-9ac19f\",\"requestedSubscription\":\"e2e-rate-iso-a-227b9f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T16:21:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cc6995ae-a731-46b3-8168-553505f36ee5","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9ac19f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-9ac19f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-227b9f","namespace":"ai-tenant-e2e-shared-a-9ac19f","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T16:21:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cc6995ae-a731-46b3-8168-553505f36ee5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:21:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc6995ae-a731-46b3-8168-553505f36ee5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:21:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc6995ae-a731-46b3-8168-553505f36ee5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:21:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc6995ae-a731-46b3-8168-553505f36ee5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9ac19f/rate-test-model-9ac19f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:21:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc6995ae-a731-46b3-8168-553505f36ee5","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:21:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc6995ae-a731-46b3-8168-553505f36ee5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:21:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc6995ae-a731-46b3-8168-553505f36ee5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-227b9f"}
{"level":"debug","ts":"2026-07-07T16:21:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc6995ae-a731-46b3-8168-553505f36ee5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T16:21:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc6995ae-a731-46b3-8168-553505f36ee5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"98b7028b-a2a8-4107-9dea-67e866ba66c9","keyName":"e2e-rate-a-227b9f","selected_subscription":"e2e-rate-iso-a-227b9f","selected_subscription_key":"ai-tenant-e2e-shared-a-9ac19f/e2e-rate-iso-a-227b9f@ai-tenant-e2e-shared-a-9ac19f/rate-test-model-9ac19f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-9ac19f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-227b9f","namespace":"ai-tenant-e2e-shared-a-9ac19f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T16:21:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cc6995ae-a731-46b3-8168-553505f36ee5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:21:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cc6995ae-a731-46b3-8168-553505f36ee5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:21:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"290f1119-a182-4e50-b55b-67dd681d187c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:40096","PortSpecifier":{"PortValue":40096}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"290f1119-a182-4e50-b55b-67dd681d187c","method":"POST","path":"/ai-tenant-e2e-shared-a-9ac19f/rate-test-model-9ac19f/v1/completions","host":"e2e-shared-a-9ac19f.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:21:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"290f1119-a182-4e50-b55b-67dd681d187c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:40096","PortSpecifier":{"PortValue":40096}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783441266,"nanos":712929699},"http":{"id":"290f1119-a182-4e50-b55b-67dd681d187c","method":"POST","headers":{":authority":"e2e-shared-a-9ac19f.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-9ac19f/rate-test-model-9ac19f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:21:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"290f1119-a182-4e50-b55b-67dd681d187c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-4mOww8MEb1xgXGah_66O1z5MxR9im5uaK0HEkbll2djGCh7VOWkBSe8033dp"}
{"level":"debug","ts":"2026-07-07T16:21:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"290f1119-a182-4e50-b55b-67dd681d187c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9ac19f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-4mOww8MEb1xgXGah_66O1z5MxR9im5uaK0HEkbll2djGCh7VOWkBSe8033dp\"}"}
{"level":"debug","ts":"2026-07-07T16:21:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"290f1119-a182-4e50-b55b-67dd681d187c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9ac19f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"98b7028b-a2a8-4107-9dea-67e866ba66c9","keyName":"e2e-rate-a-227b9f","subscription":"e2e-rate-iso-a-227b9f","tenant":"e2e-shared-a-9ac19f","userId":"98b7028b-a2a8-4107-9dea-67e866ba66c9","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T16:21:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"290f1119-a182-4e50-b55b-67dd681d187c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-9ac19f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-9ac19f/rate-test-model-9ac19f\",\"requestedSubscription\":\"e2e-rate-iso-a-227b9f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T16:21:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"290f1119-a182-4e50-b55b-67dd681d187c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9ac19f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-9ac19f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-227b9f","namespace":"ai-tenant-e2e-shared-a-9ac19f","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T16:21:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"290f1119-a182-4e50-b55b-67dd681d187c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:21:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"290f1119-a182-4e50-b55b-67dd681d187c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:21:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"290f1119-a182-4e50-b55b-67dd681d187c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:21:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"290f1119-a182-4e50-b55b-67dd681d187c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9ac19f/rate-test-model-9ac19f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:21:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"290f1119-a182-4e50-b55b-67dd681d187c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:21:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"290f1119-a182-4e50-b55b-67dd681d187c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:21:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"290f1119-a182-4e50-b55b-67dd681d187c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-227b9f"}
{"level":"debug","ts":"2026-07-07T16:21:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"290f1119-a182-4e50-b55b-67dd681d187c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T16:21:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"290f1119-a182-4e50-b55b-67dd681d187c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"98b7028b-a2a8-4107-9dea-67e866ba66c9","keyName":"e2e-rate-a-227b9f","selected_subscription":"e2e-rate-iso-a-227b9f","selected_subscription_key":"ai-tenant-e2e-shared-a-9ac19f/e2e-rate-iso-a-227b9f@ai-tenant-e2e-shared-a-9ac19f/rate-test-model-9ac19f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-9ac19f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-227b9f","namespace":"ai-tenant-e2e-shared-a-9ac19f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T16:21:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"290f1119-a182-4e50-b55b-67dd681d187c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:21:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"290f1119-a182-4e50-b55b-67dd681d187c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:21:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c51a220e-55b6-409f-b95b-907205b8fcbd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:40110","PortSpecifier":{"PortValue":40110}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c51a220e-55b6-409f-b95b-907205b8fcbd","method":"POST","path":"/ai-tenant-e2e-shared-a-9ac19f/rate-test-model-9ac19f/v1/completions","host":"e2e-shared-a-9ac19f.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:21:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c51a220e-55b6-409f-b95b-907205b8fcbd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:40110","PortSpecifier":{"PortValue":40110}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783441267,"nanos":755701607},"http":{"id":"c51a220e-55b6-409f-b95b-907205b8fcbd","method":"POST","headers":{":authority":"e2e-shared-a-9ac19f.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-9ac19f/rate-test-model-9ac19f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:21:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c51a220e-55b6-409f-b95b-907205b8fcbd","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-4mOww8MEb1xgXGah_66O1z5MxR9im5uaK0HEkbll2djGCh7VOWkBSe8033dp"}
{"level":"debug","ts":"2026-07-07T16:21:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c51a220e-55b6-409f-b95b-907205b8fcbd","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9ac19f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-4mOww8MEb1xgXGah_66O1z5MxR9im5uaK0HEkbll2djGCh7VOWkBSe8033dp\"}"}
{"level":"debug","ts":"2026-07-07T16:21:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c51a220e-55b6-409f-b95b-907205b8fcbd","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9ac19f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"98b7028b-a2a8-4107-9dea-67e866ba66c9","keyName":"e2e-rate-a-227b9f","subscription":"e2e-rate-iso-a-227b9f","tenant":"e2e-shared-a-9ac19f","userId":"98b7028b-a2a8-4107-9dea-67e866ba66c9","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T16:21:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c51a220e-55b6-409f-b95b-907205b8fcbd","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-9ac19f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-9ac19f/rate-test-model-9ac19f\",\"requestedSubscription\":\"e2e-rate-iso-a-227b9f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T16:21:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c51a220e-55b6-409f-b95b-907205b8fcbd","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9ac19f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-9ac19f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-227b9f","namespace":"ai-tenant-e2e-shared-a-9ac19f","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T16:21:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c51a220e-55b6-409f-b95b-907205b8fcbd","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:21:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c51a220e-55b6-409f-b95b-907205b8fcbd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:21:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c51a220e-55b6-409f-b95b-907205b8fcbd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:21:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c51a220e-55b6-409f-b95b-907205b8fcbd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9ac19f/rate-test-model-9ac19f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:21:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c51a220e-55b6-409f-b95b-907205b8fcbd","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:21:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c51a220e-55b6-409f-b95b-907205b8fcbd","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:21:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c51a220e-55b6-409f-b95b-907205b8fcbd","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T16:21:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c51a220e-55b6-409f-b95b-907205b8fcbd","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-227b9f"}
{"level":"debug","ts":"2026-07-07T16:21:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c51a220e-55b6-409f-b95b-907205b8fcbd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"98b7028b-a2a8-4107-9dea-67e866ba66c9","keyName":"e2e-rate-a-227b9f","selected_subscription":"e2e-rate-iso-a-227b9f","selected_subscription_key":"ai-tenant-e2e-shared-a-9ac19f/e2e-rate-iso-a-227b9f@ai-tenant-e2e-shared-a-9ac19f/rate-test-model-9ac19f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-9ac19f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-227b9f","namespace":"ai-tenant-e2e-shared-a-9ac19f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T16:21:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c51a220e-55b6-409f-b95b-907205b8fcbd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:21:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c51a220e-55b6-409f-b95b-907205b8fcbd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:21:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c8fa53d4-556f-4153-9fb3-b3154e588f6b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:40118","PortSpecifier":{"PortValue":40118}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c8fa53d4-556f-4153-9fb3-b3154e588f6b","method":"POST","path":"/ai-tenant-e2e-shared-a-9ac19f/rate-test-model-9ac19f/v1/completions","host":"e2e-shared-a-9ac19f.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:21:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c8fa53d4-556f-4153-9fb3-b3154e588f6b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:40118","PortSpecifier":{"PortValue":40118}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783441268,"nanos":794718770},"http":{"id":"c8fa53d4-556f-4153-9fb3-b3154e588f6b","method":"POST","headers":{":authority":"e2e-shared-a-9ac19f.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-9ac19f/rate-test-model-9ac19f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:21:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c8fa53d4-556f-4153-9fb3-b3154e588f6b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-4mOww8MEb1xgXGah_66O1z5MxR9im5uaK0HEkbll2djGCh7VOWkBSe8033dp"}
{"level":"debug","ts":"2026-07-07T16:21:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c8fa53d4-556f-4153-9fb3-b3154e588f6b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9ac19f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-4mOww8MEb1xgXGah_66O1z5MxR9im5uaK0HEkbll2djGCh7VOWkBSe8033dp\"}"}
{"level":"debug","ts":"2026-07-07T16:21:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c8fa53d4-556f-4153-9fb3-b3154e588f6b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9ac19f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"98b7028b-a2a8-4107-9dea-67e866ba66c9","keyName":"e2e-rate-a-227b9f","subscription":"e2e-rate-iso-a-227b9f","tenant":"e2e-shared-a-9ac19f","userId":"98b7028b-a2a8-4107-9dea-67e866ba66c9","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T16:21:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c8fa53d4-556f-4153-9fb3-b3154e588f6b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-9ac19f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-9ac19f/rate-test-model-9ac19f\",\"requestedSubscription\":\"e2e-rate-iso-a-227b9f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T16:21:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c8fa53d4-556f-4153-9fb3-b3154e588f6b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9ac19f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-9ac19f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-227b9f","namespace":"ai-tenant-e2e-shared-a-9ac19f","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T16:21:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c8fa53d4-556f-4153-9fb3-b3154e588f6b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:21:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8fa53d4-556f-4153-9fb3-b3154e588f6b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:21:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8fa53d4-556f-4153-9fb3-b3154e588f6b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:21:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8fa53d4-556f-4153-9fb3-b3154e588f6b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:21:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8fa53d4-556f-4153-9fb3-b3154e588f6b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9ac19f/rate-test-model-9ac19f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:21:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8fa53d4-556f-4153-9fb3-b3154e588f6b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:21:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8fa53d4-556f-4153-9fb3-b3154e588f6b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-227b9f"}
{"level":"debug","ts":"2026-07-07T16:21:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8fa53d4-556f-4153-9fb3-b3154e588f6b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T16:21:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8fa53d4-556f-4153-9fb3-b3154e588f6b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"98b7028b-a2a8-4107-9dea-67e866ba66c9","keyName":"e2e-rate-a-227b9f","selected_subscription":"e2e-rate-iso-a-227b9f","selected_subscription_key":"ai-tenant-e2e-shared-a-9ac19f/e2e-rate-iso-a-227b9f@ai-tenant-e2e-shared-a-9ac19f/rate-test-model-9ac19f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-9ac19f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-227b9f","namespace":"ai-tenant-e2e-shared-a-9ac19f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T16:21:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c8fa53d4-556f-4153-9fb3-b3154e588f6b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:21:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c8fa53d4-556f-4153-9fb3-b3154e588f6b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:21:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fd3a7b49-321a-474b-ae4f-66c8a1464f85","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:40338","PortSpecifier":{"PortValue":40338}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fd3a7b49-321a-474b-ae4f-66c8a1464f85","method":"POST","path":"/ai-tenant-e2e-shared-b-132358/rate-test-model-132358/v1/completions","host":"e2e-shared-b-132358.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:21:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fd3a7b49-321a-474b-ae4f-66c8a1464f85","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:40338","PortSpecifier":{"PortValue":40338}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783441268,"nanos":832005043},"http":{"id":"fd3a7b49-321a-474b-ae4f-66c8a1464f85","method":"POST","headers":{":authority":"e2e-shared-b-132358.apps.bda1e952-baee-4f94-897f-13545484d307.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-132358/rate-test-model-132358/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:21:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fd3a7b49-321a-474b-ae4f-66c8a1464f85","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-71C9xyxm9xQ9mFmr_vIHRDpR92pvrMRvAq6KUd35AVDKB2qqAHMCApNqp5D5"}
{"level":"debug","ts":"2026-07-07T16:21:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fd3a7b49-321a-474b-ae4f-66c8a1464f85","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-132358.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-71C9xyxm9xQ9mFmr_vIHRDpR92pvrMRvAq6KUd35AVDKB2qqAHMCApNqp5D5\"}"}
{"level":"debug","ts":"2026-07-07T16:21:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fd3a7b49-321a-474b-ae4f-66c8a1464f85","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-132358.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ded81427-ef2a-49e2-a044-06736e58d67d","keyName":"e2e-rate-b-227b9f","subscription":"e2e-rate-iso-b-227b9f","tenant":"e2e-shared-b-132358","userId":"ded81427-ef2a-49e2-a044-06736e58d67d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T16:21:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fd3a7b49-321a-474b-ae4f-66c8a1464f85","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-132358.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-132358/rate-test-model-132358\",\"requestedSubscription\":\"e2e-rate-iso-b-227b9f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T16:21:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fd3a7b49-321a-474b-ae4f-66c8a1464f85","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-132358.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-132358","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-227b9f","namespace":"ai-tenant-e2e-shared-b-132358","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T16:21:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fd3a7b49-321a-474b-ae4f-66c8a1464f85","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:21:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd3a7b49-321a-474b-ae4f-66c8a1464f85","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:21:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd3a7b49-321a-474b-ae4f-66c8a1464f85","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:21:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd3a7b49-321a-474b-ae4f-66c8a1464f85","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:21:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd3a7b49-321a-474b-ae4f-66c8a1464f85","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-132358/rate-test-model-132358\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:21:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd3a7b49-321a-474b-ae4f-66c8a1464f85","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:21:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd3a7b49-321a-474b-ae4f-66c8a1464f85","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-227b9f"}
{"level":"debug","ts":"2026-07-07T16:21:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd3a7b49-321a-474b-ae4f-66c8a1464f85","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T16:21:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd3a7b49-321a-474b-ae4f-66c8a1464f85","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ded81427-ef2a-49e2-a044-06736e58d67d","keyName":"e2e-rate-b-227b9f","selected_subscription":"e2e-rate-iso-b-227b9f","selected_subscription_key":"ai-tenant-e2e-shared-b-132358/e2e-rate-iso-b-227b9f@ai-tenant-e2e-shared-b-132358/rate-test-model-132358","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-132358","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-227b9f","namespace":"ai-tenant-e2e-shared-b-132358","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T16:21:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fd3a7b49-321a-474b-ae4f-66c8a1464f85","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:21:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fd3a7b49-321a-474b-ae4f-66c8a1464f85","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:21:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8f6e8816f1c46a8f0d0f1f8d2e2639ebc6bec3c94a04fd0cc32f615d0d80e8c9"}
{"level":"info","ts":"2026-07-07T16:21:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fe740d6fc7b2d2198dac07f335a22e1600fda73d6feb12d8c852c0568fee2f28"}
{"level":"info","ts":"2026-07-07T16:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/70fe7aa1ebcfd2bb2b068ff01a07008c281551ecc0a3b3369666870bad273016"}
{"level":"info","ts":"2026-07-07T16:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9fa2b1b7967b094b94df2cda61027cb7f7398fa32afa44e33b36771439703cbb"}
{"level":"info","ts":"2026-07-07T16:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2f8b52584c83ea84e170b58c7824346c700c775206e7277006ff1471ad231e3b"}
{"level":"info","ts":"2026-07-07T16:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4b2ba7eb701a9c3a1ccda77cf264d45bc4b25926fd302e8e568e4a8d4a1d8bef"}
{"level":"info","ts":"2026-07-07T16:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/85661348386c0fea7b1da998d0d82b4855b0019f0a9e15bf3be7d09f67d0be5e"}
{"level":"info","ts":"2026-07-07T16:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8f491763020e7ea6dcc052f3a32f241b36b4c58e83b9494151b804909ee70aff"}
{"level":"info","ts":"2026-07-07T16:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1e8d0ceec1fb8e75a2b8c504b54ab84af2bb4b71afeaa20d185a22b5c18213c0"}
{"level":"info","ts":"2026-07-07T16:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5e513592a541b25f8085edfc1d1293b97e873fe273e572c5469f4694937e5cec"}
{"level":"info","ts":"2026-07-07T16:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/78aa3852458690e87b66ac9493d1e2aea36c0147c1fd89d665cc550c14231563"}
{"level":"info","ts":"2026-07-07T16:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/720b119ef6cd26e8da493fe03bea89224645347d2376e3849b4382078c168d19"}
{"level":"info","ts":"2026-07-07T16:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0ff33a0204338fe25d7028ac4127a3edd3cccadd4219105675c06d66e177473d"}
{"level":"info","ts":"2026-07-07T16:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2229179d1e190639226ed3306298b75fd67df8b3242af7086e94c31f08991670"}
{"level":"info","ts":"2026-07-07T16:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a6241ced91e953c01f20d64194268496b13e7a1db76a84f6c44b9ea8f11a52b2"}
{"level":"info","ts":"2026-07-07T16:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d9f9be3d7c8ed815064283d76f387404d04d3787a0f4a7eb0ee5d8c4b39659a9"}
{"level":"info","ts":"2026-07-07T16:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d62d32dbb011d2f7c6b27c2258eecc11171224936b8d6533e787a9c6adb11e8f"}
{"level":"info","ts":"2026-07-07T16:21:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3c4837bb948a57692c1f9958f1fe527b98d2c5a74c2ef139553fb58a1d793d16"}
{"level":"info","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b057fea29aab48a542ba72fba8a30a8759e13a0914bbb6f617f01f703c5fda83"}
{"level":"info","ts":"2026-07-07T16:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fa9439c19319bc358b5861271ae9c5b13b5f6184ba86588d5cee5303919011c7"}