--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"debug","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f4e43e97f723d0f456aa51934a5d1fb038acf6ab762748adb2cbd7ed0f4b03d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:08:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:08:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7f4e43e97f723d0f456aa51934a5d1fb038acf6ab762748adb2cbd7ed0f4b03d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f4e43e97f723d0f456aa51934a5d1fb038acf6ab762748adb2cbd7ed0f4b03d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"683e4bfd4da0be38d975d1078156ee0ab473b230594c49b82503a72bd8a44155","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:08:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:08:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/683e4bfd4da0be38d975d1078156ee0ab473b230594c49b82503a72bd8a44155"}
{"level":"info","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"683e4bfd4da0be38d975d1078156ee0ab473b230594c49b82503a72bd8a44155","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f4e43e97f723d0f456aa51934a5d1fb038acf6ab762748adb2cbd7ed0f4b03d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:08:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:08:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f4e43e97f723d0f456aa51934a5d1fb038acf6ab762748adb2cbd7ed0f4b03d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5deee4f2060971e48ecf41e74a787c7c371518e31699d4342336abb8409619ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:08:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:08:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f4e43e97f723d0f456aa51934a5d1fb038acf6ab762748adb2cbd7ed0f4b03d"}
{"level":"info","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5deee4f2060971e48ecf41e74a787c7c371518e31699d4342336abb8409619ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"683e4bfd4da0be38d975d1078156ee0ab473b230594c49b82503a72bd8a44155","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:08:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:08:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["683e4bfd4da0be38d975d1078156ee0ab473b230594c49b82503a72bd8a44155"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"683e4bfd4da0be38d975d1078156ee0ab473b230594c49b82503a72bd8a44155","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f4e43e97f723d0f456aa51934a5d1fb038acf6ab762748adb2cbd7ed0f4b03d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:08:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:08:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7f4e43e97f723d0f456aa51934a5d1fb038acf6ab762748adb2cbd7ed0f4b03d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5deee4f2060971e48ecf41e74a787c7c371518e31699d4342336abb8409619ac"}
{"level":"info","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f4e43e97f723d0f456aa51934a5d1fb038acf6ab762748adb2cbd7ed0f4b03d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5deee4f2060971e48ecf41e74a787c7c371518e31699d4342336abb8409619ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:08:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:08:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5deee4f2060971e48ecf41e74a787c7c371518e31699d4342336abb8409619ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/683e4bfd4da0be38d975d1078156ee0ab473b230594c49b82503a72bd8a44155"}
{"level":"info","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5deee4f2060971e48ecf41e74a787c7c371518e31699d4342336abb8409619ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"683e4bfd4da0be38d975d1078156ee0ab473b230594c49b82503a72bd8a44155","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f4e43e97f723d0f456aa51934a5d1fb038acf6ab762748adb2cbd7ed0f4b03d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:08:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:08:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f4e43e97f723d0f456aa51934a5d1fb038acf6ab762748adb2cbd7ed0f4b03d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5deee4f2060971e48ecf41e74a787c7c371518e31699d4342336abb8409619ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f4e43e97f723d0f456aa51934a5d1fb038acf6ab762748adb2cbd7ed0f4b03d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f4e43e97f723d0f456aa51934a5d1fb038acf6ab762748adb2cbd7ed0f4b03d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f4e43e97f723d0f456aa51934a5d1fb038acf6ab762748adb2cbd7ed0f4b03d"}
{"level":"debug","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5aafc007afd6f8becc79d688bbad0b401a1014ad945055775c2a065a01208076","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:08:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:08:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5aafc007afd6f8becc79d688bbad0b401a1014ad945055775c2a065a01208076","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"134c69d9ead65f34a6ae009888894a5721abf3328116a33e8fc0e1670153f665","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:08:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:08:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5deee4f2060971e48ecf41e74a787c7c371518e31699d4342336abb8409619ac"}
{"level":"info","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"134c69d9ead65f34a6ae009888894a5721abf3328116a33e8fc0e1670153f665","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f4e43e97f723d0f456aa51934a5d1fb038acf6ab762748adb2cbd7ed0f4b03d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5aafc007afd6f8becc79d688bbad0b401a1014ad945055775c2a065a01208076","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"134c69d9ead65f34a6ae009888894a5721abf3328116a33e8fc0e1670153f665","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"134c69d9ead65f34a6ae009888894a5721abf3328116a33e8fc0e1670153f665","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5aafc007afd6f8becc79d688bbad0b401a1014ad945055775c2a065a01208076","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f4e43e97f723d0f456aa51934a5d1fb038acf6ab762748adb2cbd7ed0f4b03d"}
{"level":"debug","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"134c69d9ead65f34a6ae009888894a5721abf3328116a33e8fc0e1670153f665","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5aafc007afd6f8becc79d688bbad0b401a1014ad945055775c2a065a01208076","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:08:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:08:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5aafc007afd6f8becc79d688bbad0b401a1014ad945055775c2a065a01208076"}
{"level":"info","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5aafc007afd6f8becc79d688bbad0b401a1014ad945055775c2a065a01208076","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f4e43e97f723d0f456aa51934a5d1fb038acf6ab762748adb2cbd7ed0f4b03d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:08:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:08:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7f4e43e97f723d0f456aa51934a5d1fb038acf6ab762748adb2cbd7ed0f4b03d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f4e43e97f723d0f456aa51934a5d1fb038acf6ab762748adb2cbd7ed0f4b03d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5aafc007afd6f8becc79d688bbad0b401a1014ad945055775c2a065a01208076","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:08:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:08:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5aafc007afd6f8becc79d688bbad0b401a1014ad945055775c2a065a01208076"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5aafc007afd6f8becc79d688bbad0b401a1014ad945055775c2a065a01208076","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f4e43e97f723d0f456aa51934a5d1fb038acf6ab762748adb2cbd7ed0f4b03d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"134c69d9ead65f34a6ae009888894a5721abf3328116a33e8fc0e1670153f665","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:08:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:08:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/134c69d9ead65f34a6ae009888894a5721abf3328116a33e8fc0e1670153f665"}
{"level":"info","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"134c69d9ead65f34a6ae009888894a5721abf3328116a33e8fc0e1670153f665","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5aafc007afd6f8becc79d688bbad0b401a1014ad945055775c2a065a01208076","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:08:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:08:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5aafc007afd6f8becc79d688bbad0b401a1014ad945055775c2a065a01208076","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cd73c0140d8a6e5f28ca20c3c5a798343e0b654820a2ccad27e8d7c922456e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:08:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:08:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cd73c0140d8a6e5f28ca20c3c5a798343e0b654820a2ccad27e8d7c922456e0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"134c69d9ead65f34a6ae009888894a5721abf3328116a33e8fc0e1670153f665","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:08:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:08:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["134c69d9ead65f34a6ae009888894a5721abf3328116a33e8fc0e1670153f665"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5aafc007afd6f8becc79d688bbad0b401a1014ad945055775c2a065a01208076"}
{"level":"info","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"134c69d9ead65f34a6ae009888894a5721abf3328116a33e8fc0e1670153f665","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5aafc007afd6f8becc79d688bbad0b401a1014ad945055775c2a065a01208076","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:08:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:08:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5aafc007afd6f8becc79d688bbad0b401a1014ad945055775c2a065a01208076"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5aafc007afd6f8becc79d688bbad0b401a1014ad945055775c2a065a01208076","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cd73c0140d8a6e5f28ca20c3c5a798343e0b654820a2ccad27e8d7c922456e0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"134c69d9ead65f34a6ae009888894a5721abf3328116a33e8fc0e1670153f665","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5aafc007afd6f8becc79d688bbad0b401a1014ad945055775c2a065a01208076","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f4e43e97f723d0f456aa51934a5d1fb038acf6ab762748adb2cbd7ed0f4b03d"}
{"level":"debug","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cd73c0140d8a6e5f28ca20c3c5a798343e0b654820a2ccad27e8d7c922456e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:08:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:08:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cd73c0140d8a6e5f28ca20c3c5a798343e0b654820a2ccad27e8d7c922456e0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cd73c0140d8a6e5f28ca20c3c5a798343e0b654820a2ccad27e8d7c922456e0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cd73c0140d8a6e5f28ca20c3c5a798343e0b654820a2ccad27e8d7c922456e0"}
{"level":"debug","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"134c69d9ead65f34a6ae009888894a5721abf3328116a33e8fc0e1670153f665","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:08:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:08:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"134c69d9ead65f34a6ae009888894a5721abf3328116a33e8fc0e1670153f665","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cd73c0140d8a6e5f28ca20c3c5a798343e0b654820a2ccad27e8d7c922456e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:08:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:08:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4cd73c0140d8a6e5f28ca20c3c5a798343e0b654820a2ccad27e8d7c922456e0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/134c69d9ead65f34a6ae009888894a5721abf3328116a33e8fc0e1670153f665"}
{"level":"info","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cd73c0140d8a6e5f28ca20c3c5a798343e0b654820a2ccad27e8d7c922456e0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"134c69d9ead65f34a6ae009888894a5721abf3328116a33e8fc0e1670153f665","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:08:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:08:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["134c69d9ead65f34a6ae009888894a5721abf3328116a33e8fc0e1670153f665"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"134c69d9ead65f34a6ae009888894a5721abf3328116a33e8fc0e1670153f665","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cd73c0140d8a6e5f28ca20c3c5a798343e0b654820a2ccad27e8d7c922456e0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"134c69d9ead65f34a6ae009888894a5721abf3328116a33e8fc0e1670153f665","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5aafc007afd6f8becc79d688bbad0b401a1014ad945055775c2a065a01208076"}
{"level":"info","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cd73c0140d8a6e5f28ca20c3c5a798343e0b654820a2ccad27e8d7c922456e0"}
{"level":"info","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/134c69d9ead65f34a6ae009888894a5721abf3328116a33e8fc0e1670153f665"}
{"level":"debug","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e96759f73e3fe41de4f087da6c003e4b77300900570fb984102e8dcfd41d2a2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:08:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:08:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e96759f73e3fe41de4f087da6c003e4b77300900570fb984102e8dcfd41d2a2a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e96759f73e3fe41de4f087da6c003e4b77300900570fb984102e8dcfd41d2a2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:08:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:08:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e96759f73e3fe41de4f087da6c003e4b77300900570fb984102e8dcfd41d2a2a"}
{"level":"info","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e96759f73e3fe41de4f087da6c003e4b77300900570fb984102e8dcfd41d2a2a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e96759f73e3fe41de4f087da6c003e4b77300900570fb984102e8dcfd41d2a2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:08:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:08:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e96759f73e3fe41de4f087da6c003e4b77300900570fb984102e8dcfd41d2a2a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e96759f73e3fe41de4f087da6c003e4b77300900570fb984102e8dcfd41d2a2a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e96759f73e3fe41de4f087da6c003e4b77300900570fb984102e8dcfd41d2a2a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e96759f73e3fe41de4f087da6c003e4b77300900570fb984102e8dcfd41d2a2a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e96759f73e3fe41de4f087da6c003e4b77300900570fb984102e8dcfd41d2a2a"}
{"level":"info","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e96759f73e3fe41de4f087da6c003e4b77300900570fb984102e8dcfd41d2a2a"}
{"level":"debug","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1cafcff45710af52e96c0f7427b25b8f14dc6aea0be14bc455a423b848a29214","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:08:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:08:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1cafcff45710af52e96c0f7427b25b8f14dc6aea0be14bc455a423b848a29214","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1cafcff45710af52e96c0f7427b25b8f14dc6aea0be14bc455a423b848a29214","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:08:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:08:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cafcff45710af52e96c0f7427b25b8f14dc6aea0be14bc455a423b848a29214"}
{"level":"info","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1cafcff45710af52e96c0f7427b25b8f14dc6aea0be14bc455a423b848a29214","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e96759f73e3fe41de4f087da6c003e4b77300900570fb984102e8dcfd41d2a2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:08:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:08:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e96759f73e3fe41de4f087da6c003e4b77300900570fb984102e8dcfd41d2a2a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e96759f73e3fe41de4f087da6c003e4b77300900570fb984102e8dcfd41d2a2a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1cafcff45710af52e96c0f7427b25b8f14dc6aea0be14bc455a423b848a29214","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e96759f73e3fe41de4f087da6c003e4b77300900570fb984102e8dcfd41d2a2a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cafcff45710af52e96c0f7427b25b8f14dc6aea0be14bc455a423b848a29214"}
{"level":"debug","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1cafcff45710af52e96c0f7427b25b8f14dc6aea0be14bc455a423b848a29214","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:08:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:08:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1cafcff45710af52e96c0f7427b25b8f14dc6aea0be14bc455a423b848a29214"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e96759f73e3fe41de4f087da6c003e4b77300900570fb984102e8dcfd41d2a2a"}
{"level":"info","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1cafcff45710af52e96c0f7427b25b8f14dc6aea0be14bc455a423b848a29214","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1cafcff45710af52e96c0f7427b25b8f14dc6aea0be14bc455a423b848a29214","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:08:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:08:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cafcff45710af52e96c0f7427b25b8f14dc6aea0be14bc455a423b848a29214"}
{"level":"info","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1cafcff45710af52e96c0f7427b25b8f14dc6aea0be14bc455a423b848a29214","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1cafcff45710af52e96c0f7427b25b8f14dc6aea0be14bc455a423b848a29214","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1cafcff45710af52e96c0f7427b25b8f14dc6aea0be14bc455a423b848a29214","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cafcff45710af52e96c0f7427b25b8f14dc6aea0be14bc455a423b848a29214"}
{"level":"debug","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1cafcff45710af52e96c0f7427b25b8f14dc6aea0be14bc455a423b848a29214","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cafcff45710af52e96c0f7427b25b8f14dc6aea0be14bc455a423b848a29214"}
{"level":"debug","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1cafcff45710af52e96c0f7427b25b8f14dc6aea0be14bc455a423b848a29214","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:08:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:08:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1cafcff45710af52e96c0f7427b25b8f14dc6aea0be14bc455a423b848a29214"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1cafcff45710af52e96c0f7427b25b8f14dc6aea0be14bc455a423b848a29214","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1cafcff45710af52e96c0f7427b25b8f14dc6aea0be14bc455a423b848a29214","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cafcff45710af52e96c0f7427b25b8f14dc6aea0be14bc455a423b848a29214"}
{"level":"debug","ts":"2026-07-05T20:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dde6b4a68186de411d46878c0639f18bdf13e28a201a75d2fff441a939179fec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:08:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:08:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dde6b4a68186de411d46878c0639f18bdf13e28a201a75d2fff441a939179fec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dde6b4a68186de411d46878c0639f18bdf13e28a201a75d2fff441a939179fec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dde6b4a68186de411d46878c0639f18bdf13e28a201a75d2fff441a939179fec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dde6b4a68186de411d46878c0639f18bdf13e28a201a75d2fff441a939179fec"}
{"level":"debug","ts":"2026-07-05T20:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dde6b4a68186de411d46878c0639f18bdf13e28a201a75d2fff441a939179fec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dde6b4a68186de411d46878c0639f18bdf13e28a201a75d2fff441a939179fec"}
{"level":"debug","ts":"2026-07-05T20:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dde6b4a68186de411d46878c0639f18bdf13e28a201a75d2fff441a939179fec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:08:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:08:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dde6b4a68186de411d46878c0639f18bdf13e28a201a75d2fff441a939179fec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dde6b4a68186de411d46878c0639f18bdf13e28a201a75d2fff441a939179fec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dde6b4a68186de411d46878c0639f18bdf13e28a201a75d2fff441a939179fec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dde6b4a68186de411d46878c0639f18bdf13e28a201a75d2fff441a939179fec"}
{"level":"debug","ts":"2026-07-05T20:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad4b9f1d7e7b1d005dfaf2c8de6522f639cbffc7106d9d98d01e9bd6d3b0473d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:08:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:08:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad4b9f1d7e7b1d005dfaf2c8de6522f639cbffc7106d9d98d01e9bd6d3b0473d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad4b9f1d7e7b1d005dfaf2c8de6522f639cbffc7106d9d98d01e9bd6d3b0473d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad4b9f1d7e7b1d005dfaf2c8de6522f639cbffc7106d9d98d01e9bd6d3b0473d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad4b9f1d7e7b1d005dfaf2c8de6522f639cbffc7106d9d98d01e9bd6d3b0473d"}
{"level":"debug","ts":"2026-07-05T20:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad4b9f1d7e7b1d005dfaf2c8de6522f639cbffc7106d9d98d01e9bd6d3b0473d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad4b9f1d7e7b1d005dfaf2c8de6522f639cbffc7106d9d98d01e9bd6d3b0473d"}
{"level":"debug","ts":"2026-07-05T20:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad4b9f1d7e7b1d005dfaf2c8de6522f639cbffc7106d9d98d01e9bd6d3b0473d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:08:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:08:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad4b9f1d7e7b1d005dfaf2c8de6522f639cbffc7106d9d98d01e9bd6d3b0473d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad4b9f1d7e7b1d005dfaf2c8de6522f639cbffc7106d9d98d01e9bd6d3b0473d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad4b9f1d7e7b1d005dfaf2c8de6522f639cbffc7106d9d98d01e9bd6d3b0473d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad4b9f1d7e7b1d005dfaf2c8de6522f639cbffc7106d9d98d01e9bd6d3b0473d"}
{"level":"debug","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f3cb977c75715228fab7ddb5757ca7b46305f1539f51577ca88cde8fedf6f3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:08:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:08:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f3cb977c75715228fab7ddb5757ca7b46305f1539f51577ca88cde8fedf6f3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f3cb977c75715228fab7ddb5757ca7b46305f1539f51577ca88cde8fedf6f3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:08:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:08:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f3cb977c75715228fab7ddb5757ca7b46305f1539f51577ca88cde8fedf6f3d"}
{"level":"info","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f3cb977c75715228fab7ddb5757ca7b46305f1539f51577ca88cde8fedf6f3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f3cb977c75715228fab7ddb5757ca7b46305f1539f51577ca88cde8fedf6f3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:08:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:08:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2f3cb977c75715228fab7ddb5757ca7b46305f1539f51577ca88cde8fedf6f3d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2f3cb977c75715228fab7ddb5757ca7b46305f1539f51577ca88cde8fedf6f3d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f3cb977c75715228fab7ddb5757ca7b46305f1539f51577ca88cde8fedf6f3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f3cb977c75715228fab7ddb5757ca7b46305f1539f51577ca88cde8fedf6f3d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f3cb977c75715228fab7ddb5757ca7b46305f1539f51577ca88cde8fedf6f3d"}
{"level":"info","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f3cb977c75715228fab7ddb5757ca7b46305f1539f51577ca88cde8fedf6f3d"}
{"level":"debug","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f3cb977c75715228fab7ddb5757ca7b46305f1539f51577ca88cde8fedf6f3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:08:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:08:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f3cb977c75715228fab7ddb5757ca7b46305f1539f51577ca88cde8fedf6f3d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f3cb977c75715228fab7ddb5757ca7b46305f1539f51577ca88cde8fedf6f3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f3cb977c75715228fab7ddb5757ca7b46305f1539f51577ca88cde8fedf6f3d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f3cb977c75715228fab7ddb5757ca7b46305f1539f51577ca88cde8fedf6f3d"}
{"level":"debug","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b6e12c5e8e999af4adf079025c3820257b39ee3ab0e144ad3813047dea25fd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:08:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:08:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b6e12c5e8e999af4adf079025c3820257b39ee3ab0e144ad3813047dea25fd3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b6e12c5e8e999af4adf079025c3820257b39ee3ab0e144ad3813047dea25fd3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b6e12c5e8e999af4adf079025c3820257b39ee3ab0e144ad3813047dea25fd3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b6e12c5e8e999af4adf079025c3820257b39ee3ab0e144ad3813047dea25fd3"}
{"level":"debug","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b6e12c5e8e999af4adf079025c3820257b39ee3ab0e144ad3813047dea25fd3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b6e12c5e8e999af4adf079025c3820257b39ee3ab0e144ad3813047dea25fd3"}
{"level":"debug","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b6e12c5e8e999af4adf079025c3820257b39ee3ab0e144ad3813047dea25fd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:08:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:08:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0b6e12c5e8e999af4adf079025c3820257b39ee3ab0e144ad3813047dea25fd3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b6e12c5e8e999af4adf079025c3820257b39ee3ab0e144ad3813047dea25fd3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b6e12c5e8e999af4adf079025c3820257b39ee3ab0e144ad3813047dea25fd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:08:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:08:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b6e12c5e8e999af4adf079025c3820257b39ee3ab0e144ad3813047dea25fd3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d327e83c47e9fac4edd40dc3c43ab3aa3eb1b54cac38f06dae230804e5fe0380","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:08:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:08:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b6e12c5e8e999af4adf079025c3820257b39ee3ab0e144ad3813047dea25fd3"}
{"level":"info","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d327e83c47e9fac4edd40dc3c43ab3aa3eb1b54cac38f06dae230804e5fe0380","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b6e12c5e8e999af4adf079025c3820257b39ee3ab0e144ad3813047dea25fd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:08:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:08:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0b6e12c5e8e999af4adf079025c3820257b39ee3ab0e144ad3813047dea25fd3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b6e12c5e8e999af4adf079025c3820257b39ee3ab0e144ad3813047dea25fd3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d327e83c47e9fac4edd40dc3c43ab3aa3eb1b54cac38f06dae230804e5fe0380","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:08:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:08:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d327e83c47e9fac4edd40dc3c43ab3aa3eb1b54cac38f06dae230804e5fe0380"}
{"level":"info","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d327e83c47e9fac4edd40dc3c43ab3aa3eb1b54cac38f06dae230804e5fe0380","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b6e12c5e8e999af4adf079025c3820257b39ee3ab0e144ad3813047dea25fd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:08:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:08:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b6e12c5e8e999af4adf079025c3820257b39ee3ab0e144ad3813047dea25fd3"}
{"level":"info","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b6e12c5e8e999af4adf079025c3820257b39ee3ab0e144ad3813047dea25fd3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d327e83c47e9fac4edd40dc3c43ab3aa3eb1b54cac38f06dae230804e5fe0380","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b6e12c5e8e999af4adf079025c3820257b39ee3ab0e144ad3813047dea25fd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:08:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:08:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0b6e12c5e8e999af4adf079025c3820257b39ee3ab0e144ad3813047dea25fd3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b6e12c5e8e999af4adf079025c3820257b39ee3ab0e144ad3813047dea25fd3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b6e12c5e8e999af4adf079025c3820257b39ee3ab0e144ad3813047dea25fd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:08:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:08:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0b6e12c5e8e999af4adf079025c3820257b39ee3ab0e144ad3813047dea25fd3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0b6e12c5e8e999af4adf079025c3820257b39ee3ab0e144ad3813047dea25fd3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0b6e12c5e8e999af4adf079025c3820257b39ee3ab0e144ad3813047dea25fd3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d327e83c47e9fac4edd40dc3c43ab3aa3eb1b54cac38f06dae230804e5fe0380","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b6e12c5e8e999af4adf079025c3820257b39ee3ab0e144ad3813047dea25fd3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d327e83c47e9fac4edd40dc3c43ab3aa3eb1b54cac38f06dae230804e5fe0380"}
{"level":"debug","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b6e12c5e8e999af4adf079025c3820257b39ee3ab0e144ad3813047dea25fd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:08:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:08:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b6e12c5e8e999af4adf079025c3820257b39ee3ab0e144ad3813047dea25fd3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"060aa4663fdf7fd0f37d59a9691a463307020d3c12c83ca2363e4276a0a6ec74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:08:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:08:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b6e12c5e8e999af4adf079025c3820257b39ee3ab0e144ad3813047dea25fd3"}
{"level":"info","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"060aa4663fdf7fd0f37d59a9691a463307020d3c12c83ca2363e4276a0a6ec74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b6e12c5e8e999af4adf079025c3820257b39ee3ab0e144ad3813047dea25fd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:08:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:08:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0b6e12c5e8e999af4adf079025c3820257b39ee3ab0e144ad3813047dea25fd3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b6e12c5e8e999af4adf079025c3820257b39ee3ab0e144ad3813047dea25fd3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b90a91f12a97fc60a5b0ae70fe6d654d6603b92a09c780d16eb73bd5e3336226","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:08:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:08:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b90a91f12a97fc60a5b0ae70fe6d654d6603b92a09c780d16eb73bd5e3336226","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d327e83c47e9fac4edd40dc3c43ab3aa3eb1b54cac38f06dae230804e5fe0380","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:08:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:08:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d327e83c47e9fac4edd40dc3c43ab3aa3eb1b54cac38f06dae230804e5fe0380"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/060aa4663fdf7fd0f37d59a9691a463307020d3c12c83ca2363e4276a0a6ec74"}
{"level":"info","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d327e83c47e9fac4edd40dc3c43ab3aa3eb1b54cac38f06dae230804e5fe0380","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"060aa4663fdf7fd0f37d59a9691a463307020d3c12c83ca2363e4276a0a6ec74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:08:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:08:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["060aa4663fdf7fd0f37d59a9691a463307020d3c12c83ca2363e4276a0a6ec74"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"060aa4663fdf7fd0f37d59a9691a463307020d3c12c83ca2363e4276a0a6ec74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b6e12c5e8e999af4adf079025c3820257b39ee3ab0e144ad3813047dea25fd3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b90a91f12a97fc60a5b0ae70fe6d654d6603b92a09c780d16eb73bd5e3336226","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:08:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:08:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b90a91f12a97fc60a5b0ae70fe6d654d6603b92a09c780d16eb73bd5e3336226"}
{"level":"info","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b90a91f12a97fc60a5b0ae70fe6d654d6603b92a09c780d16eb73bd5e3336226","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d327e83c47e9fac4edd40dc3c43ab3aa3eb1b54cac38f06dae230804e5fe0380","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"060aa4663fdf7fd0f37d59a9691a463307020d3c12c83ca2363e4276a0a6ec74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b90a91f12a97fc60a5b0ae70fe6d654d6603b92a09c780d16eb73bd5e3336226","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:08:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:08:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b90a91f12a97fc60a5b0ae70fe6d654d6603b92a09c780d16eb73bd5e3336226"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b6e12c5e8e999af4adf079025c3820257b39ee3ab0e144ad3813047dea25fd3"}
{"level":"info","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b90a91f12a97fc60a5b0ae70fe6d654d6603b92a09c780d16eb73bd5e3336226","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b90a91f12a97fc60a5b0ae70fe6d654d6603b92a09c780d16eb73bd5e3336226","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:08:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:08:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b90a91f12a97fc60a5b0ae70fe6d654d6603b92a09c780d16eb73bd5e3336226"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b90a91f12a97fc60a5b0ae70fe6d654d6603b92a09c780d16eb73bd5e3336226","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b90a91f12a97fc60a5b0ae70fe6d654d6603b92a09c780d16eb73bd5e3336226\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b90a91f12a97fc60a5b0ae70fe6d654d6603b92a09c780d16eb73bd5e3336226","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b90a91f12a97fc60a5b0ae70fe6d654d6603b92a09c780d16eb73bd5e3336226","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/060aa4663fdf7fd0f37d59a9691a463307020d3c12c83ca2363e4276a0a6ec74"}
{"level":"info","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d327e83c47e9fac4edd40dc3c43ab3aa3eb1b54cac38f06dae230804e5fe0380"}
{"level":"info","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b90a91f12a97fc60a5b0ae70fe6d654d6603b92a09c780d16eb73bd5e3336226"}
{"level":"debug","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0cbabd58e61ab765d8c74d3694c59b939a8eb053eb5d316076b9f772175f008","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:08:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:08:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0cbabd58e61ab765d8c74d3694c59b939a8eb053eb5d316076b9f772175f008","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0cbabd58e61ab765d8c74d3694c59b939a8eb053eb5d316076b9f772175f008","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0cbabd58e61ab765d8c74d3694c59b939a8eb053eb5d316076b9f772175f008","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0cbabd58e61ab765d8c74d3694c59b939a8eb053eb5d316076b9f772175f008"}
{"level":"debug","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0cbabd58e61ab765d8c74d3694c59b939a8eb053eb5d316076b9f772175f008","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0cbabd58e61ab765d8c74d3694c59b939a8eb053eb5d316076b9f772175f008"}
{"level":"debug","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0cbabd58e61ab765d8c74d3694c59b939a8eb053eb5d316076b9f772175f008","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:08:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:08:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0cbabd58e61ab765d8c74d3694c59b939a8eb053eb5d316076b9f772175f008"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0cbabd58e61ab765d8c74d3694c59b939a8eb053eb5d316076b9f772175f008","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0cbabd58e61ab765d8c74d3694c59b939a8eb053eb5d316076b9f772175f008","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa82c9cd91a6440aaf0499f137c5421351b4a04f1cd6272c521f93fdd22db72c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:08:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:08:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa82c9cd91a6440aaf0499f137c5421351b4a04f1cd6272c521f93fdd22db72c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3bf687762b1417eb653f4529a7696a530781279572ffa1175b2d986301323f2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:08:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:08:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0cbabd58e61ab765d8c74d3694c59b939a8eb053eb5d316076b9f772175f008"}
{"level":"info","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3bf687762b1417eb653f4529a7696a530781279572ffa1175b2d986301323f2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa82c9cd91a6440aaf0499f137c5421351b4a04f1cd6272c521f93fdd22db72c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:08:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:08:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa82c9cd91a6440aaf0499f137c5421351b4a04f1cd6272c521f93fdd22db72c"}
{"level":"info","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa82c9cd91a6440aaf0499f137c5421351b4a04f1cd6272c521f93fdd22db72c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3bf687762b1417eb653f4529a7696a530781279572ffa1175b2d986301323f2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:08:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:08:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3bf687762b1417eb653f4529a7696a530781279572ffa1175b2d986301323f2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa82c9cd91a6440aaf0499f137c5421351b4a04f1cd6272c521f93fdd22db72c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:08:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:08:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aa82c9cd91a6440aaf0499f137c5421351b4a04f1cd6272c521f93fdd22db72c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3bf687762b1417eb653f4529a7696a530781279572ffa1175b2d986301323f2b"}
{"level":"info","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa82c9cd91a6440aaf0499f137c5421351b4a04f1cd6272c521f93fdd22db72c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3bf687762b1417eb653f4529a7696a530781279572ffa1175b2d986301323f2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:08:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:08:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3bf687762b1417eb653f4529a7696a530781279572ffa1175b2d986301323f2b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa82c9cd91a6440aaf0499f137c5421351b4a04f1cd6272c521f93fdd22db72c"}
{"level":"info","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3bf687762b1417eb653f4529a7696a530781279572ffa1175b2d986301323f2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa82c9cd91a6440aaf0499f137c5421351b4a04f1cd6272c521f93fdd22db72c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3bf687762b1417eb653f4529a7696a530781279572ffa1175b2d986301323f2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:08:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:08:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3bf687762b1417eb653f4529a7696a530781279572ffa1175b2d986301323f2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3bf687762b1417eb653f4529a7696a530781279572ffa1175b2d986301323f2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3bf687762b1417eb653f4529a7696a530781279572ffa1175b2d986301323f2b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3bf687762b1417eb653f4529a7696a530781279572ffa1175b2d986301323f2b"}
{"level":"debug","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3bf687762b1417eb653f4529a7696a530781279572ffa1175b2d986301323f2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:08:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:08:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3bf687762b1417eb653f4529a7696a530781279572ffa1175b2d986301323f2b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa82c9cd91a6440aaf0499f137c5421351b4a04f1cd6272c521f93fdd22db72c"}
{"level":"info","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3bf687762b1417eb653f4529a7696a530781279572ffa1175b2d986301323f2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3bf687762b1417eb653f4529a7696a530781279572ffa1175b2d986301323f2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:08:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:08:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3bf687762b1417eb653f4529a7696a530781279572ffa1175b2d986301323f2b"}
{"level":"info","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3bf687762b1417eb653f4529a7696a530781279572ffa1175b2d986301323f2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3bf687762b1417eb653f4529a7696a530781279572ffa1175b2d986301323f2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3bf687762b1417eb653f4529a7696a530781279572ffa1175b2d986301323f2b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:08:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3bf687762b1417eb653f4529a7696a530781279572ffa1175b2d986301323f2b"}
{"level":"debug","ts":"2026-07-05T20:08:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3bf687762b1417eb653f4529a7696a530781279572ffa1175b2d986301323f2b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:08:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3bf687762b1417eb653f4529a7696a530781279572ffa1175b2d986301323f2b"}
{"level":"debug","ts":"2026-07-05T20:08:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3bf687762b1417eb653f4529a7696a530781279572ffa1175b2d986301323f2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:08:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:08:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3bf687762b1417eb653f4529a7696a530781279572ffa1175b2d986301323f2b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3bf687762b1417eb653f4529a7696a530781279572ffa1175b2d986301323f2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3bf687762b1417eb653f4529a7696a530781279572ffa1175b2d986301323f2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:08:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:08:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3bf687762b1417eb653f4529a7696a530781279572ffa1175b2d986301323f2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3bf687762b1417eb653f4529a7696a530781279572ffa1175b2d986301323f2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3bf687762b1417eb653f4529a7696a530781279572ffa1175b2d986301323f2b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:08:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3bf687762b1417eb653f4529a7696a530781279572ffa1175b2d986301323f2b"}
{"level":"debug","ts":"2026-07-05T20:08:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3bf687762b1417eb653f4529a7696a530781279572ffa1175b2d986301323f2b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:08:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3bf687762b1417eb653f4529a7696a530781279572ffa1175b2d986301323f2b"}
{"level":"debug","ts":"2026-07-05T20:08:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3bf687762b1417eb653f4529a7696a530781279572ffa1175b2d986301323f2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:08:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:08:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3bf687762b1417eb653f4529a7696a530781279572ffa1175b2d986301323f2b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3bf687762b1417eb653f4529a7696a530781279572ffa1175b2d986301323f2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3bf687762b1417eb653f4529a7696a530781279572ffa1175b2d986301323f2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:08:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:08:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3bf687762b1417eb653f4529a7696a530781279572ffa1175b2d986301323f2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3bf687762b1417eb653f4529a7696a530781279572ffa1175b2d986301323f2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3bf687762b1417eb653f4529a7696a530781279572ffa1175b2d986301323f2b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:08:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3bf687762b1417eb653f4529a7696a530781279572ffa1175b2d986301323f2b"}
{"level":"debug","ts":"2026-07-05T20:08:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3bf687762b1417eb653f4529a7696a530781279572ffa1175b2d986301323f2b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:08:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3bf687762b1417eb653f4529a7696a530781279572ffa1175b2d986301323f2b"}
{"level":"debug","ts":"2026-07-05T20:08:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3bf687762b1417eb653f4529a7696a530781279572ffa1175b2d986301323f2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:08:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:08:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3bf687762b1417eb653f4529a7696a530781279572ffa1175b2d986301323f2b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:08:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3bf687762b1417eb653f4529a7696a530781279572ffa1175b2d986301323f2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:08:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3bf687762b1417eb653f4529a7696a530781279572ffa1175b2d986301323f2b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:08:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3bf687762b1417eb653f4529a7696a530781279572ffa1175b2d986301323f2b"}
{"level":"info","ts":"2026-07-05T20:08:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6acbba14-6627-4205-be4e-e7fb842b16c3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:43896","PortSpecifier":{"PortValue":43896}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6acbba14-6627-4205-be4e-e7fb842b16c3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d9296f.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T20:08:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6acbba14-6627-4205-be4e-e7fb842b16c3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:43896","PortSpecifier":{"PortValue":43896}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783282099,"nanos":317767047},"http":{"id":"6acbba14-6627-4205-be4e-e7fb842b16c3","method":"POST","headers":{":authority":"e2e-shared-a-d9296f.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:08:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6acbba14-6627-4205-be4e-e7fb842b16c3","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-05T20:08:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6acbba14-6627-4205-be4e-e7fb842b16c3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"194493da-c643-4106-84be-40e77e620680","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=120c6712-5da3-498d-b760-248e4ea7ef6d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe635c3faecd"]}}
{"level":"debug","ts":"2026-07-05T20:08:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6acbba14-6627-4205-be4e-e7fb842b16c3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe635c3faecd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=120c6712-5da3-498d-b760-248e4ea7ef6d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"194493da-c643-4106-84be-40e77e620680","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4cd73c0140d8a6e5f28ca20c3c5a798343e0b654820a2ccad27e8d7c922456e0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d9296f.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:08:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6acbba14-6627-4205-be4e-e7fb842b16c3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:08:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6acbba14-6627-4205-be4e-e7fb842b16c3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:08:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6acbba14-6627-4205-be4e-e7fb842b16c3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d9296f/auth-test-model-d9296f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:08:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6acbba14-6627-4205-be4e-e7fb842b16c3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-05T20:08:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6acbba14-6627-4205-be4e-e7fb842b16c3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-05T20:08:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6acbba14-6627-4205-be4e-e7fb842b16c3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-05T20:08:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6acbba14-6627-4205-be4e-e7fb842b16c3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T20:08:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6acbba14-6627-4205-be4e-e7fb842b16c3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T20:08:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"25992615-a13a-4f8f-9be4-388767449d9e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:59292","PortSpecifier":{"PortValue":59292}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"25992615-a13a-4f8f-9be4-388767449d9e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-65fb4d.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T20:08:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"25992615-a13a-4f8f-9be4-388767449d9e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:59292","PortSpecifier":{"PortValue":59292}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783282099,"nanos":380399789},"http":{"id":"25992615-a13a-4f8f-9be4-388767449d9e","method":"POST","headers":{":authority":"e2e-shared-b-65fb4d.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:08:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"25992615-a13a-4f8f-9be4-388767449d9e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-05T20:08:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"25992615-a13a-4f8f-9be4-388767449d9e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"194493da-c643-4106-84be-40e77e620680","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=120c6712-5da3-498d-b760-248e4ea7ef6d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe635c3faecd"]}}
{"level":"debug","ts":"2026-07-05T20:08:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"25992615-a13a-4f8f-9be4-388767449d9e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe635c3faecd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=120c6712-5da3-498d-b760-248e4ea7ef6d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"194493da-c643-4106-84be-40e77e620680","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ad4b9f1d7e7b1d005dfaf2c8de6522f639cbffc7106d9d98d01e9bd6d3b0473d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-65fb4d.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:08:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"25992615-a13a-4f8f-9be4-388767449d9e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:08:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"25992615-a13a-4f8f-9be4-388767449d9e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:08:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"25992615-a13a-4f8f-9be4-388767449d9e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-65fb4d/auth-test-model-65fb4d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:08:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"25992615-a13a-4f8f-9be4-388767449d9e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-05T20:08:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"25992615-a13a-4f8f-9be4-388767449d9e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T20:08:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"25992615-a13a-4f8f-9be4-388767449d9e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-05T20:08:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"25992615-a13a-4f8f-9be4-388767449d9e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T20:08:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"25992615-a13a-4f8f-9be4-388767449d9e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T20:08:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"82cd3b29-1764-4f32-9827-5e0aa23f9c4e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:43910","PortSpecifier":{"PortValue":43910}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"82cd3b29-1764-4f32-9827-5e0aa23f9c4e","method":"GET","path":"/maas-api/v1/api-keys/57f43230-5f50-44ba-a0bb-9835111cc745","host":"e2e-shared-a-d9296f.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T20:08:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"82cd3b29-1764-4f32-9827-5e0aa23f9c4e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:43910","PortSpecifier":{"PortValue":43910}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783282099,"nanos":464220499},"http":{"id":"82cd3b29-1764-4f32-9827-5e0aa23f9c4e","method":"GET","headers":{":authority":"e2e-shared-a-d9296f.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/57f43230-5f50-44ba-a0bb-9835111cc745",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:08:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"82cd3b29-1764-4f32-9827-5e0aa23f9c4e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-05T20:08:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"82cd3b29-1764-4f32-9827-5e0aa23f9c4e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"194493da-c643-4106-84be-40e77e620680","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=120c6712-5da3-498d-b760-248e4ea7ef6d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe635c3faecd"]}}
{"level":"debug","ts":"2026-07-05T20:08:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"82cd3b29-1764-4f32-9827-5e0aa23f9c4e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe635c3faecd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=120c6712-5da3-498d-b760-248e4ea7ef6d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"194493da-c643-4106-84be-40e77e620680","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4cd73c0140d8a6e5f28ca20c3c5a798343e0b654820a2ccad27e8d7c922456e0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d9296f.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/57f43230-5f50-44ba-a0bb-9835111cc745",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:08:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"82cd3b29-1764-4f32-9827-5e0aa23f9c4e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:08:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"82cd3b29-1764-4f32-9827-5e0aa23f9c4e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:08:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"82cd3b29-1764-4f32-9827-5e0aa23f9c4e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d9296f/auth-test-model-d9296f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:08:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"82cd3b29-1764-4f32-9827-5e0aa23f9c4e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-05T20:08:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"82cd3b29-1764-4f32-9827-5e0aa23f9c4e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-05T20:08:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"82cd3b29-1764-4f32-9827-5e0aa23f9c4e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-05T20:08:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"82cd3b29-1764-4f32-9827-5e0aa23f9c4e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T20:08:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"82cd3b29-1764-4f32-9827-5e0aa23f9c4e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T20:08:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7ffc4994-0ef5-4ec1-b201-0175b83c576c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:59298","PortSpecifier":{"PortValue":59298}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7ffc4994-0ef5-4ec1-b201-0175b83c576c","method":"GET","path":"/maas-api/v1/api-keys/348ab857-53c1-4846-b3ef-4816d531e7d8","host":"e2e-shared-b-65fb4d.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T20:08:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7ffc4994-0ef5-4ec1-b201-0175b83c576c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:59298","PortSpecifier":{"PortValue":59298}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783282099,"nanos":499142678},"http":{"id":"7ffc4994-0ef5-4ec1-b201-0175b83c576c","method":"GET","headers":{":authority":"e2e-shared-b-65fb4d.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/348ab857-53c1-4846-b3ef-4816d531e7d8",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:08:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7ffc4994-0ef5-4ec1-b201-0175b83c576c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-05T20:08:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7ffc4994-0ef5-4ec1-b201-0175b83c576c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"194493da-c643-4106-84be-40e77e620680","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=120c6712-5da3-498d-b760-248e4ea7ef6d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe635c3faecd"]}}
{"level":"debug","ts":"2026-07-05T20:08:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7ffc4994-0ef5-4ec1-b201-0175b83c576c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe635c3faecd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=120c6712-5da3-498d-b760-248e4ea7ef6d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"194493da-c643-4106-84be-40e77e620680","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ad4b9f1d7e7b1d005dfaf2c8de6522f639cbffc7106d9d98d01e9bd6d3b0473d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-65fb4d.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/348ab857-53c1-4846-b3ef-4816d531e7d8",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:08:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ffc4994-0ef5-4ec1-b201-0175b83c576c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:08:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ffc4994-0ef5-4ec1-b201-0175b83c576c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:08:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ffc4994-0ef5-4ec1-b201-0175b83c576c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-65fb4d/auth-test-model-65fb4d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:08:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7ffc4994-0ef5-4ec1-b201-0175b83c576c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-05T20:08:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7ffc4994-0ef5-4ec1-b201-0175b83c576c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T20:08:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7ffc4994-0ef5-4ec1-b201-0175b83c576c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-05T20:08:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7ffc4994-0ef5-4ec1-b201-0175b83c576c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T20:08:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7ffc4994-0ef5-4ec1-b201-0175b83c576c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T20:08:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"82257194-cefe-4e45-987c-4171895c6147","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:33958","PortSpecifier":{"PortValue":33958}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"82257194-cefe-4e45-987c-4171895c6147","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d9296f.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T20:08:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"82257194-cefe-4e45-987c-4171895c6147","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:33958","PortSpecifier":{"PortValue":33958}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783282114,"nanos":488874365},"http":{"id":"82257194-cefe-4e45-987c-4171895c6147","method":"POST","headers":{":authority":"e2e-shared-a-d9296f.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:08:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"82257194-cefe-4e45-987c-4171895c6147","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-05T20:08:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"82257194-cefe-4e45-987c-4171895c6147","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"194493da-c643-4106-84be-40e77e620680","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=120c6712-5da3-498d-b760-248e4ea7ef6d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe635c3faecd"]}}
{"level":"debug","ts":"2026-07-05T20:08:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"82257194-cefe-4e45-987c-4171895c6147","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe635c3faecd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=120c6712-5da3-498d-b760-248e4ea7ef6d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"194493da-c643-4106-84be-40e77e620680","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4cd73c0140d8a6e5f28ca20c3c5a798343e0b654820a2ccad27e8d7c922456e0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d9296f.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:08:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"82257194-cefe-4e45-987c-4171895c6147","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:08:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"82257194-cefe-4e45-987c-4171895c6147","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:08:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"82257194-cefe-4e45-987c-4171895c6147","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d9296f/auth-test-model-d9296f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:08:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"82257194-cefe-4e45-987c-4171895c6147","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-05T20:08:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"82257194-cefe-4e45-987c-4171895c6147","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T20:08:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"82257194-cefe-4e45-987c-4171895c6147","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-05T20:08:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"82257194-cefe-4e45-987c-4171895c6147","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T20:08:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"82257194-cefe-4e45-987c-4171895c6147","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T20:08:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"467d3cd1-0fcb-45c7-9618-85c1a8f99394","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:48020","PortSpecifier":{"PortValue":48020}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"467d3cd1-0fcb-45c7-9618-85c1a8f99394","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-65fb4d.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T20:08:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"467d3cd1-0fcb-45c7-9618-85c1a8f99394","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:48020","PortSpecifier":{"PortValue":48020}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783282114,"nanos":524439717},"http":{"id":"467d3cd1-0fcb-45c7-9618-85c1a8f99394","method":"POST","headers":{":authority":"e2e-shared-b-65fb4d.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:08:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"467d3cd1-0fcb-45c7-9618-85c1a8f99394","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-05T20:08:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"467d3cd1-0fcb-45c7-9618-85c1a8f99394","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"194493da-c643-4106-84be-40e77e620680","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=120c6712-5da3-498d-b760-248e4ea7ef6d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe635c3faecd"]}}
{"level":"debug","ts":"2026-07-05T20:08:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"467d3cd1-0fcb-45c7-9618-85c1a8f99394","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe635c3faecd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=120c6712-5da3-498d-b760-248e4ea7ef6d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"194493da-c643-4106-84be-40e77e620680","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ad4b9f1d7e7b1d005dfaf2c8de6522f639cbffc7106d9d98d01e9bd6d3b0473d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-65fb4d.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:08:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"467d3cd1-0fcb-45c7-9618-85c1a8f99394","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:08:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"467d3cd1-0fcb-45c7-9618-85c1a8f99394","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:08:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"467d3cd1-0fcb-45c7-9618-85c1a8f99394","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-65fb4d/auth-test-model-65fb4d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:08:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"467d3cd1-0fcb-45c7-9618-85c1a8f99394","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-05T20:08:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"467d3cd1-0fcb-45c7-9618-85c1a8f99394","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T20:08:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"467d3cd1-0fcb-45c7-9618-85c1a8f99394","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-05T20:08:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"467d3cd1-0fcb-45c7-9618-85c1a8f99394","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T20:08:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"467d3cd1-0fcb-45c7-9618-85c1a8f99394","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T20:08:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1d11f579-2ae8-4933-8912-8703e420d890","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:33964","PortSpecifier":{"PortValue":33964}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1d11f579-2ae8-4933-8912-8703e420d890","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-d9296f.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T20:08:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1d11f579-2ae8-4933-8912-8703e420d890","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:33964","PortSpecifier":{"PortValue":33964}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783282114,"nanos":570611913},"http":{"id":"1d11f579-2ae8-4933-8912-8703e420d890","method":"GET","headers":{":authority":"e2e-shared-a-d9296f.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:08:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1d11f579-2ae8-4933-8912-8703e420d890","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-JvpR1HJ369v4LA1W_O75JaOxA7XOgHj7xHQ0xP1etNCoffUCVFYkAYFhExB2"}
{"level":"debug","ts":"2026-07-05T20:08:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1d11f579-2ae8-4933-8912-8703e420d890","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d9296f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-JvpR1HJ369v4LA1W_O75JaOxA7XOgHj7xHQ0xP1etNCoffUCVFYkAYFhExB2\"}"}
{"level":"debug","ts":"2026-07-05T20:08:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1d11f579-2ae8-4933-8912-8703e420d890","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d9296f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"10fb4a75-33ac-4bf5-a13b-82d0288787a0","keyName":"e2e-auth-iso-a-76abe2","subscription":"e2e-auth-iso-36084d","tenant":"e2e-shared-a-d9296f","userId":"10fb4a75-33ac-4bf5-a13b-82d0288787a0","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-05T20:08:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1d11f579-2ae8-4933-8912-8703e420d890","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:08:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1d11f579-2ae8-4933-8912-8703e420d890","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:08:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1d11f579-2ae8-4933-8912-8703e420d890","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:08:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1d11f579-2ae8-4933-8912-8703e420d890","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d9296f/auth-test-model-d9296f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:08:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1d11f579-2ae8-4933-8912-8703e420d890","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-05T20:08:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1d11f579-2ae8-4933-8912-8703e420d890","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T20:08:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1d11f579-2ae8-4933-8912-8703e420d890","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-05T20:08:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1d11f579-2ae8-4933-8912-8703e420d890","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-36084d"}
{"level":"info","ts":"2026-07-05T20:08:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1d11f579-2ae8-4933-8912-8703e420d890","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T20:08:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1d11f579-2ae8-4933-8912-8703e420d890","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T20:08:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bc34a4c4-41e6-4b0e-95e0-9fe0f9f1e110","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:59630","PortSpecifier":{"PortValue":59630}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bc34a4c4-41e6-4b0e-95e0-9fe0f9f1e110","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d9296f.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T20:08:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bc34a4c4-41e6-4b0e-95e0-9fe0f9f1e110","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:59630","PortSpecifier":{"PortValue":59630}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783282127,"nanos":409588785},"http":{"id":"bc34a4c4-41e6-4b0e-95e0-9fe0f9f1e110","method":"POST","headers":{":authority":"e2e-shared-a-d9296f.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:08:47Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bc34a4c4-41e6-4b0e-95e0-9fe0f9f1e110","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-05T20:08:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bc34a4c4-41e6-4b0e-95e0-9fe0f9f1e110","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"194493da-c643-4106-84be-40e77e620680","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=120c6712-5da3-498d-b760-248e4ea7ef6d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe635c3faecd"]}}
{"level":"debug","ts":"2026-07-05T20:08:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bc34a4c4-41e6-4b0e-95e0-9fe0f9f1e110","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe635c3faecd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=120c6712-5da3-498d-b760-248e4ea7ef6d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"194493da-c643-4106-84be-40e77e620680","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4cd73c0140d8a6e5f28ca20c3c5a798343e0b654820a2ccad27e8d7c922456e0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d9296f.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:08:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bc34a4c4-41e6-4b0e-95e0-9fe0f9f1e110","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:08:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bc34a4c4-41e6-4b0e-95e0-9fe0f9f1e110","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:08:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bc34a4c4-41e6-4b0e-95e0-9fe0f9f1e110","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d9296f/auth-test-model-d9296f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:08:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bc34a4c4-41e6-4b0e-95e0-9fe0f9f1e110","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-05T20:08:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bc34a4c4-41e6-4b0e-95e0-9fe0f9f1e110","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T20:08:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bc34a4c4-41e6-4b0e-95e0-9fe0f9f1e110","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-05T20:08:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bc34a4c4-41e6-4b0e-95e0-9fe0f9f1e110","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T20:08:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bc34a4c4-41e6-4b0e-95e0-9fe0f9f1e110","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T20:08:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6d18a83d-a15e-41c5-ab25-e290c5a37055","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:54392","PortSpecifier":{"PortValue":54392}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6d18a83d-a15e-41c5-ab25-e290c5a37055","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-65fb4d.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T20:08:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6d18a83d-a15e-41c5-ab25-e290c5a37055","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:54392","PortSpecifier":{"PortValue":54392}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783282127,"nanos":462889116},"http":{"id":"6d18a83d-a15e-41c5-ab25-e290c5a37055","method":"POST","headers":{":authority":"e2e-shared-b-65fb4d.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:08:47Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6d18a83d-a15e-41c5-ab25-e290c5a37055","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-05T20:08:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6d18a83d-a15e-41c5-ab25-e290c5a37055","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"194493da-c643-4106-84be-40e77e620680","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=120c6712-5da3-498d-b760-248e4ea7ef6d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe635c3faecd"]}}
{"level":"debug","ts":"2026-07-05T20:08:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6d18a83d-a15e-41c5-ab25-e290c5a37055","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe635c3faecd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=120c6712-5da3-498d-b760-248e4ea7ef6d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"194493da-c643-4106-84be-40e77e620680","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ad4b9f1d7e7b1d005dfaf2c8de6522f639cbffc7106d9d98d01e9bd6d3b0473d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-65fb4d.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:08:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6d18a83d-a15e-41c5-ab25-e290c5a37055","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:08:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6d18a83d-a15e-41c5-ab25-e290c5a37055","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:08:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6d18a83d-a15e-41c5-ab25-e290c5a37055","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-65fb4d/auth-test-model-65fb4d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:08:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6d18a83d-a15e-41c5-ab25-e290c5a37055","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-05T20:08:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6d18a83d-a15e-41c5-ab25-e290c5a37055","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T20:08:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6d18a83d-a15e-41c5-ab25-e290c5a37055","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-05T20:08:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6d18a83d-a15e-41c5-ab25-e290c5a37055","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T20:08:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6d18a83d-a15e-41c5-ab25-e290c5a37055","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T20:08:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c1c79398-eacb-4287-8b8a-e52728245cda","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:54396","PortSpecifier":{"PortValue":54396}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c1c79398-eacb-4287-8b8a-e52728245cda","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-65fb4d.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T20:08:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c1c79398-eacb-4287-8b8a-e52728245cda","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:54396","PortSpecifier":{"PortValue":54396}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783282127,"nanos":499508502},"http":{"id":"c1c79398-eacb-4287-8b8a-e52728245cda","method":"GET","headers":{":authority":"e2e-shared-b-65fb4d.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:08:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c1c79398-eacb-4287-8b8a-e52728245cda","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-IQsmmIWCMtrLRNzb_4XcdvibgFAbNerLcIae6GmbpEtWX7ahqr3ElhJMI7Xy"}
{"level":"debug","ts":"2026-07-05T20:08:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c1c79398-eacb-4287-8b8a-e52728245cda","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-65fb4d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-IQsmmIWCMtrLRNzb_4XcdvibgFAbNerLcIae6GmbpEtWX7ahqr3ElhJMI7Xy\"}"}
{"level":"debug","ts":"2026-07-05T20:08:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c1c79398-eacb-4287-8b8a-e52728245cda","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-65fb4d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-05T20:08:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c1c79398-eacb-4287-8b8a-e52728245cda","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"ad4b9f1d7e7b1d005dfaf2c8de6522f639cbffc7106d9d98d01e9bd6d3b0473d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-65fb4d.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:08:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1c79398-eacb-4287-8b8a-e52728245cda","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:08:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"c1c79398-eacb-4287-8b8a-e52728245cda","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-05T20:08:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c1c79398-eacb-4287-8b8a-e52728245cda","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-05T20:08:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c1c79398-eacb-4287-8b8a-e52728245cda","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-05T20:09:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a017cc66-041f-4e26-be2d-fa4cf79b8d10","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:33248","PortSpecifier":{"PortValue":33248}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a017cc66-041f-4e26-be2d-fa4cf79b8d10","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d9296f.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T20:09:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a017cc66-041f-4e26-be2d-fa4cf79b8d10","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:33248","PortSpecifier":{"PortValue":33248}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783282142,"nanos":488632160},"http":{"id":"a017cc66-041f-4e26-be2d-fa4cf79b8d10","method":"POST","headers":{":authority":"e2e-shared-a-d9296f.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:09:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a017cc66-041f-4e26-be2d-fa4cf79b8d10","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-05T20:09:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a017cc66-041f-4e26-be2d-fa4cf79b8d10","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"194493da-c643-4106-84be-40e77e620680","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=120c6712-5da3-498d-b760-248e4ea7ef6d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe635c3faecd"]}}
{"level":"debug","ts":"2026-07-05T20:09:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a017cc66-041f-4e26-be2d-fa4cf79b8d10","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe635c3faecd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=120c6712-5da3-498d-b760-248e4ea7ef6d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"194493da-c643-4106-84be-40e77e620680","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4cd73c0140d8a6e5f28ca20c3c5a798343e0b654820a2ccad27e8d7c922456e0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d9296f.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:09:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a017cc66-041f-4e26-be2d-fa4cf79b8d10","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:09:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a017cc66-041f-4e26-be2d-fa4cf79b8d10","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:09:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a017cc66-041f-4e26-be2d-fa4cf79b8d10","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d9296f/auth-test-model-d9296f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:09:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a017cc66-041f-4e26-be2d-fa4cf79b8d10","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-05T20:09:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a017cc66-041f-4e26-be2d-fa4cf79b8d10","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-05T20:09:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a017cc66-041f-4e26-be2d-fa4cf79b8d10","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-05T20:09:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a017cc66-041f-4e26-be2d-fa4cf79b8d10","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T20:09:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a017cc66-041f-4e26-be2d-fa4cf79b8d10","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T20:09:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5c239752-1a5c-4d54-8a9a-95e3f0cd97dd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:58334","PortSpecifier":{"PortValue":58334}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5c239752-1a5c-4d54-8a9a-95e3f0cd97dd","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-65fb4d.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T20:09:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5c239752-1a5c-4d54-8a9a-95e3f0cd97dd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:58334","PortSpecifier":{"PortValue":58334}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783282142,"nanos":524369822},"http":{"id":"5c239752-1a5c-4d54-8a9a-95e3f0cd97dd","method":"POST","headers":{":authority":"e2e-shared-b-65fb4d.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:09:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5c239752-1a5c-4d54-8a9a-95e3f0cd97dd","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-05T20:09:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5c239752-1a5c-4d54-8a9a-95e3f0cd97dd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"194493da-c643-4106-84be-40e77e620680","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=120c6712-5da3-498d-b760-248e4ea7ef6d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe635c3faecd"]}}
{"level":"debug","ts":"2026-07-05T20:09:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5c239752-1a5c-4d54-8a9a-95e3f0cd97dd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe635c3faecd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=120c6712-5da3-498d-b760-248e4ea7ef6d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"194493da-c643-4106-84be-40e77e620680","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ad4b9f1d7e7b1d005dfaf2c8de6522f639cbffc7106d9d98d01e9bd6d3b0473d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-65fb4d.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:09:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5c239752-1a5c-4d54-8a9a-95e3f0cd97dd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:09:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5c239752-1a5c-4d54-8a9a-95e3f0cd97dd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:09:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5c239752-1a5c-4d54-8a9a-95e3f0cd97dd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-65fb4d/auth-test-model-65fb4d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:09:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5c239752-1a5c-4d54-8a9a-95e3f0cd97dd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-05T20:09:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5c239752-1a5c-4d54-8a9a-95e3f0cd97dd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-05T20:09:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5c239752-1a5c-4d54-8a9a-95e3f0cd97dd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-05T20:09:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5c239752-1a5c-4d54-8a9a-95e3f0cd97dd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T20:09:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5c239752-1a5c-4d54-8a9a-95e3f0cd97dd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T20:09:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6c624f21-25fa-47ac-9050-53d896d17cec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:33250","PortSpecifier":{"PortValue":33250}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6c624f21-25fa-47ac-9050-53d896d17cec","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-d9296f.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T20:09:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6c624f21-25fa-47ac-9050-53d896d17cec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:33250","PortSpecifier":{"PortValue":33250}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783282142,"nanos":565216713},"http":{"id":"6c624f21-25fa-47ac-9050-53d896d17cec","method":"POST","headers":{":authority":"e2e-shared-a-d9296f.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:09:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6c624f21-25fa-47ac-9050-53d896d17cec","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-05T20:09:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6c624f21-25fa-47ac-9050-53d896d17cec","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"194493da-c643-4106-84be-40e77e620680","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=120c6712-5da3-498d-b760-248e4ea7ef6d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe635c3faecd"]}}
{"level":"debug","ts":"2026-07-05T20:09:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6c624f21-25fa-47ac-9050-53d896d17cec","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe635c3faecd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=120c6712-5da3-498d-b760-248e4ea7ef6d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"194493da-c643-4106-84be-40e77e620680","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4cd73c0140d8a6e5f28ca20c3c5a798343e0b654820a2ccad27e8d7c922456e0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d9296f.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:09:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6c624f21-25fa-47ac-9050-53d896d17cec","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:09:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6c624f21-25fa-47ac-9050-53d896d17cec","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:09:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6c624f21-25fa-47ac-9050-53d896d17cec","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d9296f/auth-test-model-d9296f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:09:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6c624f21-25fa-47ac-9050-53d896d17cec","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-05T20:09:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6c624f21-25fa-47ac-9050-53d896d17cec","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T20:09:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6c624f21-25fa-47ac-9050-53d896d17cec","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-05T20:09:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6c624f21-25fa-47ac-9050-53d896d17cec","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T20:09:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6c624f21-25fa-47ac-9050-53d896d17cec","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T20:09:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bee3117a-131f-419f-8f11-47d3dd033721","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:58336","PortSpecifier":{"PortValue":58336}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bee3117a-131f-419f-8f11-47d3dd033721","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-65fb4d.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T20:09:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bee3117a-131f-419f-8f11-47d3dd033721","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:58336","PortSpecifier":{"PortValue":58336}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783282142,"nanos":604669461},"http":{"id":"bee3117a-131f-419f-8f11-47d3dd033721","method":"POST","headers":{":authority":"e2e-shared-b-65fb4d.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:09:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bee3117a-131f-419f-8f11-47d3dd033721","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-05T20:09:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bee3117a-131f-419f-8f11-47d3dd033721","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"194493da-c643-4106-84be-40e77e620680","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=120c6712-5da3-498d-b760-248e4ea7ef6d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe635c3faecd"]}}
{"level":"debug","ts":"2026-07-05T20:09:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bee3117a-131f-419f-8f11-47d3dd033721","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe635c3faecd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=120c6712-5da3-498d-b760-248e4ea7ef6d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"194493da-c643-4106-84be-40e77e620680","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ad4b9f1d7e7b1d005dfaf2c8de6522f639cbffc7106d9d98d01e9bd6d3b0473d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-65fb4d.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:09:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bee3117a-131f-419f-8f11-47d3dd033721","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:09:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bee3117a-131f-419f-8f11-47d3dd033721","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:09:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bee3117a-131f-419f-8f11-47d3dd033721","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-65fb4d/auth-test-model-65fb4d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:09:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bee3117a-131f-419f-8f11-47d3dd033721","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-05T20:09:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bee3117a-131f-419f-8f11-47d3dd033721","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T20:09:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bee3117a-131f-419f-8f11-47d3dd033721","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-05T20:09:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bee3117a-131f-419f-8f11-47d3dd033721","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T20:09:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bee3117a-131f-419f-8f11-47d3dd033721","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T20:09:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3ae267e1-3bdc-4621-b08a-26d9fc96ffbf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:33592","PortSpecifier":{"PortValue":33592}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3ae267e1-3bdc-4621-b08a-26d9fc96ffbf","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d9296f.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T20:09:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3ae267e1-3bdc-4621-b08a-26d9fc96ffbf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:33592","PortSpecifier":{"PortValue":33592}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783282159,"nanos":781866684},"http":{"id":"3ae267e1-3bdc-4621-b08a-26d9fc96ffbf","method":"POST","headers":{":authority":"e2e-shared-a-d9296f.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:09:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3ae267e1-3bdc-4621-b08a-26d9fc96ffbf","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-05T20:09:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3ae267e1-3bdc-4621-b08a-26d9fc96ffbf","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"194493da-c643-4106-84be-40e77e620680","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=120c6712-5da3-498d-b760-248e4ea7ef6d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe635c3faecd"]}}
{"level":"debug","ts":"2026-07-05T20:09:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3ae267e1-3bdc-4621-b08a-26d9fc96ffbf","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe635c3faecd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=120c6712-5da3-498d-b760-248e4ea7ef6d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"194493da-c643-4106-84be-40e77e620680","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4cd73c0140d8a6e5f28ca20c3c5a798343e0b654820a2ccad27e8d7c922456e0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d9296f.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:09:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ae267e1-3bdc-4621-b08a-26d9fc96ffbf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:09:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ae267e1-3bdc-4621-b08a-26d9fc96ffbf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:09:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ae267e1-3bdc-4621-b08a-26d9fc96ffbf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d9296f/auth-test-model-d9296f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:09:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3ae267e1-3bdc-4621-b08a-26d9fc96ffbf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-05T20:09:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3ae267e1-3bdc-4621-b08a-26d9fc96ffbf","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-05T20:09:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3ae267e1-3bdc-4621-b08a-26d9fc96ffbf","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-05T20:09:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3ae267e1-3bdc-4621-b08a-26d9fc96ffbf","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T20:09:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3ae267e1-3bdc-4621-b08a-26d9fc96ffbf","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T20:09:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9ea8751c-05db-4808-ae30-b7bde808d034","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:49068","PortSpecifier":{"PortValue":49068}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9ea8751c-05db-4808-ae30-b7bde808d034","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-65fb4d.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T20:09:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9ea8751c-05db-4808-ae30-b7bde808d034","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:49068","PortSpecifier":{"PortValue":49068}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783282159,"nanos":812757452},"http":{"id":"9ea8751c-05db-4808-ae30-b7bde808d034","method":"POST","headers":{":authority":"e2e-shared-b-65fb4d.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:09:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9ea8751c-05db-4808-ae30-b7bde808d034","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-05T20:09:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9ea8751c-05db-4808-ae30-b7bde808d034","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"194493da-c643-4106-84be-40e77e620680","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=120c6712-5da3-498d-b760-248e4ea7ef6d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe635c3faecd"]}}
{"level":"debug","ts":"2026-07-05T20:09:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9ea8751c-05db-4808-ae30-b7bde808d034","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe635c3faecd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=120c6712-5da3-498d-b760-248e4ea7ef6d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"194493da-c643-4106-84be-40e77e620680","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ad4b9f1d7e7b1d005dfaf2c8de6522f639cbffc7106d9d98d01e9bd6d3b0473d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-65fb4d.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:09:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9ea8751c-05db-4808-ae30-b7bde808d034","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:09:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9ea8751c-05db-4808-ae30-b7bde808d034","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:09:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9ea8751c-05db-4808-ae30-b7bde808d034","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-65fb4d/auth-test-model-65fb4d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:09:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9ea8751c-05db-4808-ae30-b7bde808d034","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-05T20:09:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9ea8751c-05db-4808-ae30-b7bde808d034","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T20:09:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9ea8751c-05db-4808-ae30-b7bde808d034","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-05T20:09:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9ea8751c-05db-4808-ae30-b7bde808d034","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T20:09:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9ea8751c-05db-4808-ae30-b7bde808d034","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T20:09:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"55e0852a-5f13-44a8-a6ee-74ffb117dc52","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:49074","PortSpecifier":{"PortValue":49074}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"55e0852a-5f13-44a8-a6ee-74ffb117dc52","method":"GET","path":"/maas-api/v1/api-keys/dc4e4591-f71d-4c06-b802-360ccc9dfab2","host":"e2e-shared-b-65fb4d.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T20:09:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"55e0852a-5f13-44a8-a6ee-74ffb117dc52","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:49074","PortSpecifier":{"PortValue":49074}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783282159,"nanos":847025513},"http":{"id":"55e0852a-5f13-44a8-a6ee-74ffb117dc52","method":"GET","headers":{":authority":"e2e-shared-b-65fb4d.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/dc4e4591-f71d-4c06-b802-360ccc9dfab2",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:09:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"55e0852a-5f13-44a8-a6ee-74ffb117dc52","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-05T20:09:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"55e0852a-5f13-44a8-a6ee-74ffb117dc52","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"194493da-c643-4106-84be-40e77e620680","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=120c6712-5da3-498d-b760-248e4ea7ef6d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe635c3faecd"]}}
{"level":"debug","ts":"2026-07-05T20:09:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"55e0852a-5f13-44a8-a6ee-74ffb117dc52","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe635c3faecd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=120c6712-5da3-498d-b760-248e4ea7ef6d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"194493da-c643-4106-84be-40e77e620680","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ad4b9f1d7e7b1d005dfaf2c8de6522f639cbffc7106d9d98d01e9bd6d3b0473d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-65fb4d.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/dc4e4591-f71d-4c06-b802-360ccc9dfab2",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:09:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"55e0852a-5f13-44a8-a6ee-74ffb117dc52","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:09:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"55e0852a-5f13-44a8-a6ee-74ffb117dc52","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:09:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"55e0852a-5f13-44a8-a6ee-74ffb117dc52","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-65fb4d/auth-test-model-65fb4d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:09:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"55e0852a-5f13-44a8-a6ee-74ffb117dc52","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-05T20:09:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"55e0852a-5f13-44a8-a6ee-74ffb117dc52","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T20:09:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"55e0852a-5f13-44a8-a6ee-74ffb117dc52","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-05T20:09:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"55e0852a-5f13-44a8-a6ee-74ffb117dc52","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T20:09:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"55e0852a-5f13-44a8-a6ee-74ffb117dc52","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T20:09:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b9e0d32a-d9ec-463c-84b7-bba418f73263","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:33606","PortSpecifier":{"PortValue":33606}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b9e0d32a-d9ec-463c-84b7-bba418f73263","method":"GET","path":"/maas-api/v1/api-keys/dc4e4591-f71d-4c06-b802-360ccc9dfab2","host":"e2e-shared-a-d9296f.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T20:09:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b9e0d32a-d9ec-463c-84b7-bba418f73263","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:33606","PortSpecifier":{"PortValue":33606}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783282159,"nanos":879755642},"http":{"id":"b9e0d32a-d9ec-463c-84b7-bba418f73263","method":"GET","headers":{":authority":"e2e-shared-a-d9296f.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/dc4e4591-f71d-4c06-b802-360ccc9dfab2",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:09:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b9e0d32a-d9ec-463c-84b7-bba418f73263","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-05T20:09:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b9e0d32a-d9ec-463c-84b7-bba418f73263","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"194493da-c643-4106-84be-40e77e620680","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=120c6712-5da3-498d-b760-248e4ea7ef6d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe635c3faecd"]}}
{"level":"debug","ts":"2026-07-05T20:09:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b9e0d32a-d9ec-463c-84b7-bba418f73263","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe635c3faecd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=120c6712-5da3-498d-b760-248e4ea7ef6d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"194493da-c643-4106-84be-40e77e620680","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4cd73c0140d8a6e5f28ca20c3c5a798343e0b654820a2ccad27e8d7c922456e0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d9296f.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/dc4e4591-f71d-4c06-b802-360ccc9dfab2",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:09:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b9e0d32a-d9ec-463c-84b7-bba418f73263","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:09:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b9e0d32a-d9ec-463c-84b7-bba418f73263","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:09:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b9e0d32a-d9ec-463c-84b7-bba418f73263","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d9296f/auth-test-model-d9296f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:09:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b9e0d32a-d9ec-463c-84b7-bba418f73263","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-05T20:09:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b9e0d32a-d9ec-463c-84b7-bba418f73263","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-05T20:09:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b9e0d32a-d9ec-463c-84b7-bba418f73263","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-05T20:09:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b9e0d32a-d9ec-463c-84b7-bba418f73263","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T20:09:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b9e0d32a-d9ec-463c-84b7-bba418f73263","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T20:09:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c2feda44-69b6-4976-95c2-695743eaab9e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:59618","PortSpecifier":{"PortValue":59618}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c2feda44-69b6-4976-95c2-695743eaab9e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d9296f.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T20:09:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c2feda44-69b6-4976-95c2-695743eaab9e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:59618","PortSpecifier":{"PortValue":59618}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783282176,"nanos":979042116},"http":{"id":"c2feda44-69b6-4976-95c2-695743eaab9e","method":"POST","headers":{":authority":"e2e-shared-a-d9296f.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:09:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c2feda44-69b6-4976-95c2-695743eaab9e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-05T20:09:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c2feda44-69b6-4976-95c2-695743eaab9e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"194493da-c643-4106-84be-40e77e620680","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=120c6712-5da3-498d-b760-248e4ea7ef6d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe635c3faecd"]}}
{"level":"debug","ts":"2026-07-05T20:09:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c2feda44-69b6-4976-95c2-695743eaab9e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe635c3faecd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=120c6712-5da3-498d-b760-248e4ea7ef6d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"194493da-c643-4106-84be-40e77e620680","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4cd73c0140d8a6e5f28ca20c3c5a798343e0b654820a2ccad27e8d7c922456e0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d9296f.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:09:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c2feda44-69b6-4976-95c2-695743eaab9e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:09:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c2feda44-69b6-4976-95c2-695743eaab9e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:09:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c2feda44-69b6-4976-95c2-695743eaab9e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d9296f/auth-test-model-d9296f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:09:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c2feda44-69b6-4976-95c2-695743eaab9e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-05T20:09:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c2feda44-69b6-4976-95c2-695743eaab9e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T20:09:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c2feda44-69b6-4976-95c2-695743eaab9e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-05T20:09:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c2feda44-69b6-4976-95c2-695743eaab9e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T20:09:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c2feda44-69b6-4976-95c2-695743eaab9e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T20:09:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"841880cd-3e54-4fba-8323-593c78fcb1e7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:43014","PortSpecifier":{"PortValue":43014}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"841880cd-3e54-4fba-8323-593c78fcb1e7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-65fb4d.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T20:09:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"841880cd-3e54-4fba-8323-593c78fcb1e7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:43014","PortSpecifier":{"PortValue":43014}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783282177,"nanos":14724577},"http":{"id":"841880cd-3e54-4fba-8323-593c78fcb1e7","method":"POST","headers":{":authority":"e2e-shared-b-65fb4d.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:09:37Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"841880cd-3e54-4fba-8323-593c78fcb1e7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-05T20:09:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"841880cd-3e54-4fba-8323-593c78fcb1e7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"194493da-c643-4106-84be-40e77e620680","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=120c6712-5da3-498d-b760-248e4ea7ef6d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe635c3faecd"]}}
{"level":"debug","ts":"2026-07-05T20:09:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"841880cd-3e54-4fba-8323-593c78fcb1e7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe635c3faecd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=120c6712-5da3-498d-b760-248e4ea7ef6d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"194493da-c643-4106-84be-40e77e620680","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ad4b9f1d7e7b1d005dfaf2c8de6522f639cbffc7106d9d98d01e9bd6d3b0473d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-65fb4d.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:09:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"841880cd-3e54-4fba-8323-593c78fcb1e7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:09:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"841880cd-3e54-4fba-8323-593c78fcb1e7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:09:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"841880cd-3e54-4fba-8323-593c78fcb1e7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-65fb4d/auth-test-model-65fb4d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:09:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"841880cd-3e54-4fba-8323-593c78fcb1e7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-05T20:09:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"841880cd-3e54-4fba-8323-593c78fcb1e7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-05T20:09:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"841880cd-3e54-4fba-8323-593c78fcb1e7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-05T20:09:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"841880cd-3e54-4fba-8323-593c78fcb1e7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T20:09:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"841880cd-3e54-4fba-8323-593c78fcb1e7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T20:09:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ca537176-a35a-4136-a67d-eaee2fd483e3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:59634","PortSpecifier":{"PortValue":59634}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ca537176-a35a-4136-a67d-eaee2fd483e3","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-d9296f.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T20:09:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ca537176-a35a-4136-a67d-eaee2fd483e3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:59634","PortSpecifier":{"PortValue":59634}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783282177,"nanos":50282703},"http":{"id":"ca537176-a35a-4136-a67d-eaee2fd483e3","method":"POST","headers":{":authority":"e2e-shared-a-d9296f.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:09:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ca537176-a35a-4136-a67d-eaee2fd483e3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-11K6SmU4VqKueu0nR_q5l4ojQqNAX3Lu1cNTtd6ckEXjQtjumOCM8rI5iyygA"}
{"level":"debug","ts":"2026-07-05T20:09:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ca537176-a35a-4136-a67d-eaee2fd483e3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d9296f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-11K6SmU4VqKueu0nR_q5l4ojQqNAX3Lu1cNTtd6ckEXjQtjumOCM8rI5iyygA\"}"}
{"level":"debug","ts":"2026-07-05T20:09:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ca537176-a35a-4136-a67d-eaee2fd483e3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d9296f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e8a54ad8-82af-4f3e-8f72-7279351f2198","keyName":"e2e-auth-iso-a-9cf196","subscription":"e2e-auth-iso-e39079","tenant":"e2e-shared-a-d9296f","userId":"e8a54ad8-82af-4f3e-8f72-7279351f2198","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-05T20:09:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ca537176-a35a-4136-a67d-eaee2fd483e3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:09:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca537176-a35a-4136-a67d-eaee2fd483e3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:09:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca537176-a35a-4136-a67d-eaee2fd483e3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:09:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca537176-a35a-4136-a67d-eaee2fd483e3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d9296f/auth-test-model-d9296f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:09:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ca537176-a35a-4136-a67d-eaee2fd483e3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-05T20:09:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca537176-a35a-4136-a67d-eaee2fd483e3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T20:09:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca537176-a35a-4136-a67d-eaee2fd483e3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-e39079"}
{"level":"debug","ts":"2026-07-05T20:09:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca537176-a35a-4136-a67d-eaee2fd483e3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-05T20:09:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ca537176-a35a-4136-a67d-eaee2fd483e3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T20:09:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ca537176-a35a-4136-a67d-eaee2fd483e3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T20:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b90a91f12a97fc60a5b0ae70fe6d654d6603b92a09c780d16eb73bd5e3336226"}
{"level":"info","ts":"2026-07-05T20:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5aafc007afd6f8becc79d688bbad0b401a1014ad945055775c2a065a01208076"}
{"level":"info","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dde6b4a68186de411d46878c0639f18bdf13e28a201a75d2fff441a939179fec"}
{"level":"info","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b0cbabd58e61ab765d8c74d3694c59b939a8eb053eb5d316076b9f772175f008"}
{"level":"info","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5deee4f2060971e48ecf41e74a787c7c371518e31699d4342336abb8409619ac"}
{"level":"info","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/134c69d9ead65f34a6ae009888894a5721abf3328116a33e8fc0e1670153f665"}
{"level":"info","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aa82c9cd91a6440aaf0499f137c5421351b4a04f1cd6272c521f93fdd22db72c"}
{"level":"info","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/060aa4663fdf7fd0f37d59a9691a463307020d3c12c83ca2363e4276a0a6ec74"}
{"level":"info","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3bf687762b1417eb653f4529a7696a530781279572ffa1175b2d986301323f2b"}
{"level":"info","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a311597329f3e9c2bcc3522f0ff3fd51fcf521f7f35184550c834a8ce6b10634"}
{"level":"info","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/683e4bfd4da0be38d975d1078156ee0ab473b230594c49b82503a72bd8a44155"}
{"level":"info","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d327e83c47e9fac4edd40dc3c43ab3aa3eb1b54cac38f06dae230804e5fe0380"}
{"level":"info","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2f3cb977c75715228fab7ddb5757ca7b46305f1539f51577ca88cde8fedf6f3d"}
{"level":"info","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7f4e43e97f723d0f456aa51934a5d1fb038acf6ab762748adb2cbd7ed0f4b03d"}
{"level":"info","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e96759f73e3fe41de4f087da6c003e4b77300900570fb984102e8dcfd41d2a2a"}
{"level":"info","ts":"2026-07-05T20:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1cafcff45710af52e96c0f7427b25b8f14dc6aea0be14bc455a423b848a29214"}
{"level":"debug","ts":"2026-07-05T20:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e66731ea90ea1fe32ea6313f1121b518c9e8592faa4ebb8cae036a4b62cacd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:09:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:09:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e66731ea90ea1fe32ea6313f1121b518c9e8592faa4ebb8cae036a4b62cacd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e66731ea90ea1fe32ea6313f1121b518c9e8592faa4ebb8cae036a4b62cacd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:09:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:09:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e66731ea90ea1fe32ea6313f1121b518c9e8592faa4ebb8cae036a4b62cacd7"}
{"level":"info","ts":"2026-07-05T20:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e66731ea90ea1fe32ea6313f1121b518c9e8592faa4ebb8cae036a4b62cacd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e66731ea90ea1fe32ea6313f1121b518c9e8592faa4ebb8cae036a4b62cacd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:09:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:09:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-05T20:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1e66731ea90ea1fe32ea6313f1121b518c9e8592faa4ebb8cae036a4b62cacd7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1e66731ea90ea1fe32ea6313f1121b518c9e8592faa4ebb8cae036a4b62cacd7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-05T20:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e66731ea90ea1fe32ea6313f1121b518c9e8592faa4ebb8cae036a4b62cacd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e66731ea90ea1fe32ea6313f1121b518c9e8592faa4ebb8cae036a4b62cacd7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e66731ea90ea1fe32ea6313f1121b518c9e8592faa4ebb8cae036a4b62cacd7"}
{"level":"info","ts":"2026-07-05T20:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e66731ea90ea1fe32ea6313f1121b518c9e8592faa4ebb8cae036a4b62cacd7"}
{"level":"debug","ts":"2026-07-05T20:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e66731ea90ea1fe32ea6313f1121b518c9e8592faa4ebb8cae036a4b62cacd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:09:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:09:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e66731ea90ea1fe32ea6313f1121b518c9e8592faa4ebb8cae036a4b62cacd7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e66731ea90ea1fe32ea6313f1121b518c9e8592faa4ebb8cae036a4b62cacd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e66731ea90ea1fe32ea6313f1121b518c9e8592faa4ebb8cae036a4b62cacd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:09:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:09:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e66731ea90ea1fe32ea6313f1121b518c9e8592faa4ebb8cae036a4b62cacd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e66731ea90ea1fe32ea6313f1121b518c9e8592faa4ebb8cae036a4b62cacd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e66731ea90ea1fe32ea6313f1121b518c9e8592faa4ebb8cae036a4b62cacd7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e66731ea90ea1fe32ea6313f1121b518c9e8592faa4ebb8cae036a4b62cacd7"}
{"level":"debug","ts":"2026-07-05T20:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e66731ea90ea1fe32ea6313f1121b518c9e8592faa4ebb8cae036a4b62cacd7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e66731ea90ea1fe32ea6313f1121b518c9e8592faa4ebb8cae036a4b62cacd7"}
{"level":"debug","ts":"2026-07-05T20:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f21d2f02670bff0ad863de47365ed52f95312308ad00bbee49157fe5d7e7952","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:09:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:09:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f21d2f02670bff0ad863de47365ed52f95312308ad00bbee49157fe5d7e7952","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f21d2f02670bff0ad863de47365ed52f95312308ad00bbee49157fe5d7e7952","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:09:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:09:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f21d2f02670bff0ad863de47365ed52f95312308ad00bbee49157fe5d7e7952"}
{"level":"info","ts":"2026-07-05T20:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f21d2f02670bff0ad863de47365ed52f95312308ad00bbee49157fe5d7e7952","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e66731ea90ea1fe32ea6313f1121b518c9e8592faa4ebb8cae036a4b62cacd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:09:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:09:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e66731ea90ea1fe32ea6313f1121b518c9e8592faa4ebb8cae036a4b62cacd7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e66731ea90ea1fe32ea6313f1121b518c9e8592faa4ebb8cae036a4b62cacd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f21d2f02670bff0ad863de47365ed52f95312308ad00bbee49157fe5d7e7952","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e66731ea90ea1fe32ea6313f1121b518c9e8592faa4ebb8cae036a4b62cacd7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f21d2f02670bff0ad863de47365ed52f95312308ad00bbee49157fe5d7e7952"}
{"level":"debug","ts":"2026-07-05T20:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f21d2f02670bff0ad863de47365ed52f95312308ad00bbee49157fe5d7e7952","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:09:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:09:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f21d2f02670bff0ad863de47365ed52f95312308ad00bbee49157fe5d7e7952"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f21d2f02670bff0ad863de47365ed52f95312308ad00bbee49157fe5d7e7952","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f21d2f02670bff0ad863de47365ed52f95312308ad00bbee49157fe5d7e7952","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e66731ea90ea1fe32ea6313f1121b518c9e8592faa4ebb8cae036a4b62cacd7"}
{"level":"debug","ts":"2026-07-05T20:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4dff7344fa9f7ed73420b6ff4fb6785aba9c566bc8339cff6531ad48e5f11028","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:09:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:09:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f21d2f02670bff0ad863de47365ed52f95312308ad00bbee49157fe5d7e7952"}
{"level":"info","ts":"2026-07-05T20:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4dff7344fa9f7ed73420b6ff4fb6785aba9c566bc8339cff6531ad48e5f11028","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4dff7344fa9f7ed73420b6ff4fb6785aba9c566bc8339cff6531ad48e5f11028","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:09:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:09:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4dff7344fa9f7ed73420b6ff4fb6785aba9c566bc8339cff6531ad48e5f11028","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4dff7344fa9f7ed73420b6ff4fb6785aba9c566bc8339cff6531ad48e5f11028","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:09:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:09:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4dff7344fa9f7ed73420b6ff4fb6785aba9c566bc8339cff6531ad48e5f11028"}
{"level":"error","ts":"2026-07-05T20:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4dff7344fa9f7ed73420b6ff4fb6785aba9c566bc8339cff6531ad48e5f11028","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4dff7344fa9f7ed73420b6ff4fb6785aba9c566bc8339cff6531ad48e5f11028\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-05T20:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4dff7344fa9f7ed73420b6ff4fb6785aba9c566bc8339cff6531ad48e5f11028","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4dff7344fa9f7ed73420b6ff4fb6785aba9c566bc8339cff6531ad48e5f11028","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4dff7344fa9f7ed73420b6ff4fb6785aba9c566bc8339cff6531ad48e5f11028"}
{"level":"debug","ts":"2026-07-05T20:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4dff7344fa9f7ed73420b6ff4fb6785aba9c566bc8339cff6531ad48e5f11028","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:09:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:09:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4dff7344fa9f7ed73420b6ff4fb6785aba9c566bc8339cff6531ad48e5f11028"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4dff7344fa9f7ed73420b6ff4fb6785aba9c566bc8339cff6531ad48e5f11028","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4dff7344fa9f7ed73420b6ff4fb6785aba9c566bc8339cff6531ad48e5f11028","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4dff7344fa9f7ed73420b6ff4fb6785aba9c566bc8339cff6531ad48e5f11028"}
{"level":"debug","ts":"2026-07-05T20:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"523ae411d9be7bc158a1b321d59e4c0ceb924453ed99db4f0543d1758d4f3839","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:09:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:09:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"523ae411d9be7bc158a1b321d59e4c0ceb924453ed99db4f0543d1758d4f3839","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"523ae411d9be7bc158a1b321d59e4c0ceb924453ed99db4f0543d1758d4f3839","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:09:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:09:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/523ae411d9be7bc158a1b321d59e4c0ceb924453ed99db4f0543d1758d4f3839"}
{"level":"info","ts":"2026-07-05T20:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"523ae411d9be7bc158a1b321d59e4c0ceb924453ed99db4f0543d1758d4f3839","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"523ae411d9be7bc158a1b321d59e4c0ceb924453ed99db4f0543d1758d4f3839","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:09:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:09:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-05T20:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"523ae411d9be7bc158a1b321d59e4c0ceb924453ed99db4f0543d1758d4f3839","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"523ae411d9be7bc158a1b321d59e4c0ceb924453ed99db4f0543d1758d4f3839\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-05T20:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"523ae411d9be7bc158a1b321d59e4c0ceb924453ed99db4f0543d1758d4f3839","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"523ae411d9be7bc158a1b321d59e4c0ceb924453ed99db4f0543d1758d4f3839","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/523ae411d9be7bc158a1b321d59e4c0ceb924453ed99db4f0543d1758d4f3839"}
{"level":"info","ts":"2026-07-05T20:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/523ae411d9be7bc158a1b321d59e4c0ceb924453ed99db4f0543d1758d4f3839"}
{"level":"debug","ts":"2026-07-05T20:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"523ae411d9be7bc158a1b321d59e4c0ceb924453ed99db4f0543d1758d4f3839","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:09:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:09:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["523ae411d9be7bc158a1b321d59e4c0ceb924453ed99db4f0543d1758d4f3839"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"523ae411d9be7bc158a1b321d59e4c0ceb924453ed99db4f0543d1758d4f3839","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"523ae411d9be7bc158a1b321d59e4c0ceb924453ed99db4f0543d1758d4f3839","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:09:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:09:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"523ae411d9be7bc158a1b321d59e4c0ceb924453ed99db4f0543d1758d4f3839","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"523ae411d9be7bc158a1b321d59e4c0ceb924453ed99db4f0543d1758d4f3839","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"523ae411d9be7bc158a1b321d59e4c0ceb924453ed99db4f0543d1758d4f3839","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/523ae411d9be7bc158a1b321d59e4c0ceb924453ed99db4f0543d1758d4f3839"}
{"level":"debug","ts":"2026-07-05T20:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"523ae411d9be7bc158a1b321d59e4c0ceb924453ed99db4f0543d1758d4f3839","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/523ae411d9be7bc158a1b321d59e4c0ceb924453ed99db4f0543d1758d4f3839"}
{"level":"debug","ts":"2026-07-05T20:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f3908a3501f897e8722d62558fe43c660e35918414ba4c234f05a43d8058afe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:09:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:09:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f3908a3501f897e8722d62558fe43c660e35918414ba4c234f05a43d8058afe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f3908a3501f897e8722d62558fe43c660e35918414ba4c234f05a43d8058afe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f3908a3501f897e8722d62558fe43c660e35918414ba4c234f05a43d8058afe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"523ae411d9be7bc158a1b321d59e4c0ceb924453ed99db4f0543d1758d4f3839","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:09:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:09:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["523ae411d9be7bc158a1b321d59e4c0ceb924453ed99db4f0543d1758d4f3839"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f3908a3501f897e8722d62558fe43c660e35918414ba4c234f05a43d8058afe"}
{"level":"info","ts":"2026-07-05T20:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"523ae411d9be7bc158a1b321d59e4c0ceb924453ed99db4f0543d1758d4f3839","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"523ae411d9be7bc158a1b321d59e4c0ceb924453ed99db4f0543d1758d4f3839","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f3908a3501f897e8722d62558fe43c660e35918414ba4c234f05a43d8058afe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f3908a3501f897e8722d62558fe43c660e35918414ba4c234f05a43d8058afe"}
{"level":"info","ts":"2026-07-05T20:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/523ae411d9be7bc158a1b321d59e4c0ceb924453ed99db4f0543d1758d4f3839"}
{"level":"debug","ts":"2026-07-05T20:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f3908a3501f897e8722d62558fe43c660e35918414ba4c234f05a43d8058afe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:09:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:09:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f3908a3501f897e8722d62558fe43c660e35918414ba4c234f05a43d8058afe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f3908a3501f897e8722d62558fe43c660e35918414ba4c234f05a43d8058afe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f3908a3501f897e8722d62558fe43c660e35918414ba4c234f05a43d8058afe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cfea72aaa55222eb7490d2faec8dd3013b7828ad84a8a859f5bae3116dea635","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:09:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:09:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cfea72aaa55222eb7490d2faec8dd3013b7828ad84a8a859f5bae3116dea635","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cfea72aaa55222eb7490d2faec8dd3013b7828ad84a8a859f5bae3116dea635","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f3908a3501f897e8722d62558fe43c660e35918414ba4c234f05a43d8058afe"}
{"level":"debug","ts":"2026-07-05T20:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cfea72aaa55222eb7490d2faec8dd3013b7828ad84a8a859f5bae3116dea635","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:09:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:09:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cfea72aaa55222eb7490d2faec8dd3013b7828ad84a8a859f5bae3116dea635","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cfea72aaa55222eb7490d2faec8dd3013b7828ad84a8a859f5bae3116dea635","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cfea72aaa55222eb7490d2faec8dd3013b7828ad84a8a859f5bae3116dea635"}
{"level":"debug","ts":"2026-07-05T20:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cfea72aaa55222eb7490d2faec8dd3013b7828ad84a8a859f5bae3116dea635","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cfea72aaa55222eb7490d2faec8dd3013b7828ad84a8a859f5bae3116dea635"}
{"level":"debug","ts":"2026-07-05T20:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"413f4ff53f75ddd9ef4cca2f6fda1188a307b0b9489eaef2387f6cd807f20b77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:09:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:09:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"413f4ff53f75ddd9ef4cca2f6fda1188a307b0b9489eaef2387f6cd807f20b77","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d33055d559dab775c74a1b7b358756562ed113076efb1ab1dfffe3cacc9f370b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:09:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:09:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/413f4ff53f75ddd9ef4cca2f6fda1188a307b0b9489eaef2387f6cd807f20b77"}
{"level":"info","ts":"2026-07-05T20:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d33055d559dab775c74a1b7b358756562ed113076efb1ab1dfffe3cacc9f370b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"413f4ff53f75ddd9ef4cca2f6fda1188a307b0b9489eaef2387f6cd807f20b77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:09:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:09:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["413f4ff53f75ddd9ef4cca2f6fda1188a307b0b9489eaef2387f6cd807f20b77"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"413f4ff53f75ddd9ef4cca2f6fda1188a307b0b9489eaef2387f6cd807f20b77","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d33055d559dab775c74a1b7b358756562ed113076efb1ab1dfffe3cacc9f370b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:09:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:09:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d33055d559dab775c74a1b7b358756562ed113076efb1ab1dfffe3cacc9f370b"}
{"level":"info","ts":"2026-07-05T20:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d33055d559dab775c74a1b7b358756562ed113076efb1ab1dfffe3cacc9f370b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cfea72aaa55222eb7490d2faec8dd3013b7828ad84a8a859f5bae3116dea635","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:09:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:09:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5cfea72aaa55222eb7490d2faec8dd3013b7828ad84a8a859f5bae3116dea635"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/413f4ff53f75ddd9ef4cca2f6fda1188a307b0b9489eaef2387f6cd807f20b77"}
{"level":"info","ts":"2026-07-05T20:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cfea72aaa55222eb7490d2faec8dd3013b7828ad84a8a859f5bae3116dea635","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"413f4ff53f75ddd9ef4cca2f6fda1188a307b0b9489eaef2387f6cd807f20b77","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d33055d559dab775c74a1b7b358756562ed113076efb1ab1dfffe3cacc9f370b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cfea72aaa55222eb7490d2faec8dd3013b7828ad84a8a859f5bae3116dea635","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d33055d559dab775c74a1b7b358756562ed113076efb1ab1dfffe3cacc9f370b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d33055d559dab775c74a1b7b358756562ed113076efb1ab1dfffe3cacc9f370b"}
{"level":"info","ts":"2026-07-05T20:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cfea72aaa55222eb7490d2faec8dd3013b7828ad84a8a859f5bae3116dea635"}
{"level":"debug","ts":"2026-07-05T20:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d33055d559dab775c74a1b7b358756562ed113076efb1ab1dfffe3cacc9f370b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:09:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:09:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d33055d559dab775c74a1b7b358756562ed113076efb1ab1dfffe3cacc9f370b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d33055d559dab775c74a1b7b358756562ed113076efb1ab1dfffe3cacc9f370b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d33055d559dab775c74a1b7b358756562ed113076efb1ab1dfffe3cacc9f370b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d33055d559dab775c74a1b7b358756562ed113076efb1ab1dfffe3cacc9f370b"}
{"level":"debug","ts":"2026-07-05T20:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b82072eed038e21123940f8a7e7e337df55dd77be406d0ea921fad79c179e65d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:10:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:10:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b82072eed038e21123940f8a7e7e337df55dd77be406d0ea921fad79c179e65d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b82072eed038e21123940f8a7e7e337df55dd77be406d0ea921fad79c179e65d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:10:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:10:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b82072eed038e21123940f8a7e7e337df55dd77be406d0ea921fad79c179e65d"}
{"level":"info","ts":"2026-07-05T20:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b82072eed038e21123940f8a7e7e337df55dd77be406d0ea921fad79c179e65d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b82072eed038e21123940f8a7e7e337df55dd77be406d0ea921fad79c179e65d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:10:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:10:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-05T20:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b82072eed038e21123940f8a7e7e337df55dd77be406d0ea921fad79c179e65d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b82072eed038e21123940f8a7e7e337df55dd77be406d0ea921fad79c179e65d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-05T20:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b82072eed038e21123940f8a7e7e337df55dd77be406d0ea921fad79c179e65d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b82072eed038e21123940f8a7e7e337df55dd77be406d0ea921fad79c179e65d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b82072eed038e21123940f8a7e7e337df55dd77be406d0ea921fad79c179e65d"}
{"level":"info","ts":"2026-07-05T20:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b82072eed038e21123940f8a7e7e337df55dd77be406d0ea921fad79c179e65d"}
{"level":"debug","ts":"2026-07-05T20:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b82072eed038e21123940f8a7e7e337df55dd77be406d0ea921fad79c179e65d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:10:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:10:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b82072eed038e21123940f8a7e7e337df55dd77be406d0ea921fad79c179e65d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b82072eed038e21123940f8a7e7e337df55dd77be406d0ea921fad79c179e65d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b82072eed038e21123940f8a7e7e337df55dd77be406d0ea921fad79c179e65d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:10:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:10:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b82072eed038e21123940f8a7e7e337df55dd77be406d0ea921fad79c179e65d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b82072eed038e21123940f8a7e7e337df55dd77be406d0ea921fad79c179e65d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b82072eed038e21123940f8a7e7e337df55dd77be406d0ea921fad79c179e65d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b82072eed038e21123940f8a7e7e337df55dd77be406d0ea921fad79c179e65d"}
{"level":"debug","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b82072eed038e21123940f8a7e7e337df55dd77be406d0ea921fad79c179e65d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b82072eed038e21123940f8a7e7e337df55dd77be406d0ea921fad79c179e65d"}
{"level":"debug","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b82072eed038e21123940f8a7e7e337df55dd77be406d0ea921fad79c179e65d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:10:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:10:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b82072eed038e21123940f8a7e7e337df55dd77be406d0ea921fad79c179e65d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b82072eed038e21123940f8a7e7e337df55dd77be406d0ea921fad79c179e65d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b82072eed038e21123940f8a7e7e337df55dd77be406d0ea921fad79c179e65d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b82072eed038e21123940f8a7e7e337df55dd77be406d0ea921fad79c179e65d"}
{"level":"debug","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72d544e981ccfbb5a392f5f1f57f2845df84f66180ab1f6b400c86911c0f8f38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:10:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:10:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72d544e981ccfbb5a392f5f1f57f2845df84f66180ab1f6b400c86911c0f8f38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72d544e981ccfbb5a392f5f1f57f2845df84f66180ab1f6b400c86911c0f8f38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72d544e981ccfbb5a392f5f1f57f2845df84f66180ab1f6b400c86911c0f8f38","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72d544e981ccfbb5a392f5f1f57f2845df84f66180ab1f6b400c86911c0f8f38"}
{"level":"debug","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72d544e981ccfbb5a392f5f1f57f2845df84f66180ab1f6b400c86911c0f8f38","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72d544e981ccfbb5a392f5f1f57f2845df84f66180ab1f6b400c86911c0f8f38"}
{"level":"debug","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72d544e981ccfbb5a392f5f1f57f2845df84f66180ab1f6b400c86911c0f8f38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:10:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:10:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["72d544e981ccfbb5a392f5f1f57f2845df84f66180ab1f6b400c86911c0f8f38"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72d544e981ccfbb5a392f5f1f57f2845df84f66180ab1f6b400c86911c0f8f38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72d544e981ccfbb5a392f5f1f57f2845df84f66180ab1f6b400c86911c0f8f38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:10:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:10:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72d544e981ccfbb5a392f5f1f57f2845df84f66180ab1f6b400c86911c0f8f38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72d544e981ccfbb5a392f5f1f57f2845df84f66180ab1f6b400c86911c0f8f38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72d544e981ccfbb5a392f5f1f57f2845df84f66180ab1f6b400c86911c0f8f38","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72d544e981ccfbb5a392f5f1f57f2845df84f66180ab1f6b400c86911c0f8f38"}
{"level":"debug","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72d544e981ccfbb5a392f5f1f57f2845df84f66180ab1f6b400c86911c0f8f38","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72d544e981ccfbb5a392f5f1f57f2845df84f66180ab1f6b400c86911c0f8f38"}
{"level":"debug","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72d544e981ccfbb5a392f5f1f57f2845df84f66180ab1f6b400c86911c0f8f38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:10:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:10:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["72d544e981ccfbb5a392f5f1f57f2845df84f66180ab1f6b400c86911c0f8f38"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72d544e981ccfbb5a392f5f1f57f2845df84f66180ab1f6b400c86911c0f8f38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72d544e981ccfbb5a392f5f1f57f2845df84f66180ab1f6b400c86911c0f8f38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:10:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:10:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72d544e981ccfbb5a392f5f1f57f2845df84f66180ab1f6b400c86911c0f8f38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72d544e981ccfbb5a392f5f1f57f2845df84f66180ab1f6b400c86911c0f8f38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72d544e981ccfbb5a392f5f1f57f2845df84f66180ab1f6b400c86911c0f8f38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35cdcec0d30377a4662d54c55bdac4b6e48ccd76b0b8f1d5c449d5106e7a8efc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:10:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:10:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72d544e981ccfbb5a392f5f1f57f2845df84f66180ab1f6b400c86911c0f8f38"}
{"level":"info","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35cdcec0d30377a4662d54c55bdac4b6e48ccd76b0b8f1d5c449d5106e7a8efc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35cdcec0d30377a4662d54c55bdac4b6e48ccd76b0b8f1d5c449d5106e7a8efc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:10:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:10:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35cdcec0d30377a4662d54c55bdac4b6e48ccd76b0b8f1d5c449d5106e7a8efc"}
{"level":"info","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35cdcec0d30377a4662d54c55bdac4b6e48ccd76b0b8f1d5c449d5106e7a8efc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72d544e981ccfbb5a392f5f1f57f2845df84f66180ab1f6b400c86911c0f8f38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35cdcec0d30377a4662d54c55bdac4b6e48ccd76b0b8f1d5c449d5106e7a8efc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:10:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:10:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35cdcec0d30377a4662d54c55bdac4b6e48ccd76b0b8f1d5c449d5106e7a8efc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"35cdcec0d30377a4662d54c55bdac4b6e48ccd76b0b8f1d5c449d5106e7a8efc","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"35cdcec0d30377a4662d54c55bdac4b6e48ccd76b0b8f1d5c449d5106e7a8efc\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35cdcec0d30377a4662d54c55bdac4b6e48ccd76b0b8f1d5c449d5106e7a8efc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:10:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:10:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35cdcec0d30377a4662d54c55bdac4b6e48ccd76b0b8f1d5c449d5106e7a8efc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72d544e981ccfbb5a392f5f1f57f2845df84f66180ab1f6b400c86911c0f8f38"}
{"level":"info","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35cdcec0d30377a4662d54c55bdac4b6e48ccd76b0b8f1d5c449d5106e7a8efc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35cdcec0d30377a4662d54c55bdac4b6e48ccd76b0b8f1d5c449d5106e7a8efc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35cdcec0d30377a4662d54c55bdac4b6e48ccd76b0b8f1d5c449d5106e7a8efc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:10:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:10:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35cdcec0d30377a4662d54c55bdac4b6e48ccd76b0b8f1d5c449d5106e7a8efc"}
{"level":"info","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35cdcec0d30377a4662d54c55bdac4b6e48ccd76b0b8f1d5c449d5106e7a8efc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35cdcec0d30377a4662d54c55bdac4b6e48ccd76b0b8f1d5c449d5106e7a8efc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:10:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:10:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"35cdcec0d30377a4662d54c55bdac4b6e48ccd76b0b8f1d5c449d5106e7a8efc","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"35cdcec0d30377a4662d54c55bdac4b6e48ccd76b0b8f1d5c449d5106e7a8efc\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72d544e981ccfbb5a392f5f1f57f2845df84f66180ab1f6b400c86911c0f8f38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:10:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:10:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["72d544e981ccfbb5a392f5f1f57f2845df84f66180ab1f6b400c86911c0f8f38"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35cdcec0d30377a4662d54c55bdac4b6e48ccd76b0b8f1d5c449d5106e7a8efc"}
{"level":"info","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72d544e981ccfbb5a392f5f1f57f2845df84f66180ab1f6b400c86911c0f8f38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35cdcec0d30377a4662d54c55bdac4b6e48ccd76b0b8f1d5c449d5106e7a8efc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35cdcec0d30377a4662d54c55bdac4b6e48ccd76b0b8f1d5c449d5106e7a8efc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72d544e981ccfbb5a392f5f1f57f2845df84f66180ab1f6b400c86911c0f8f38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14e0cc0b87aa1e5c1d47deb176d179a9192cbf82a13aadff4d173d03cb0b5bc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:10:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:10:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14e0cc0b87aa1e5c1d47deb176d179a9192cbf82a13aadff4d173d03cb0b5bc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14e0cc0b87aa1e5c1d47deb176d179a9192cbf82a13aadff4d173d03cb0b5bc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14e0cc0b87aa1e5c1d47deb176d179a9192cbf82a13aadff4d173d03cb0b5bc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14e0cc0b87aa1e5c1d47deb176d179a9192cbf82a13aadff4d173d03cb0b5bc5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35cdcec0d30377a4662d54c55bdac4b6e48ccd76b0b8f1d5c449d5106e7a8efc"}
{"level":"info","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72d544e981ccfbb5a392f5f1f57f2845df84f66180ab1f6b400c86911c0f8f38"}
{"level":"debug","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35cdcec0d30377a4662d54c55bdac4b6e48ccd76b0b8f1d5c449d5106e7a8efc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:10:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:10:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35cdcec0d30377a4662d54c55bdac4b6e48ccd76b0b8f1d5c449d5106e7a8efc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14e0cc0b87aa1e5c1d47deb176d179a9192cbf82a13aadff4d173d03cb0b5bc5"}
{"level":"info","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35cdcec0d30377a4662d54c55bdac4b6e48ccd76b0b8f1d5c449d5106e7a8efc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14e0cc0b87aa1e5c1d47deb176d179a9192cbf82a13aadff4d173d03cb0b5bc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:10:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:10:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["14e0cc0b87aa1e5c1d47deb176d179a9192cbf82a13aadff4d173d03cb0b5bc5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14e0cc0b87aa1e5c1d47deb176d179a9192cbf82a13aadff4d173d03cb0b5bc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35cdcec0d30377a4662d54c55bdac4b6e48ccd76b0b8f1d5c449d5106e7a8efc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:10:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:10:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35cdcec0d30377a4662d54c55bdac4b6e48ccd76b0b8f1d5c449d5106e7a8efc"}
{"level":"info","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35cdcec0d30377a4662d54c55bdac4b6e48ccd76b0b8f1d5c449d5106e7a8efc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14e0cc0b87aa1e5c1d47deb176d179a9192cbf82a13aadff4d173d03cb0b5bc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:10:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:10:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14e0cc0b87aa1e5c1d47deb176d179a9192cbf82a13aadff4d173d03cb0b5bc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35cdcec0d30377a4662d54c55bdac4b6e48ccd76b0b8f1d5c449d5106e7a8efc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:10:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:10:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35cdcec0d30377a4662d54c55bdac4b6e48ccd76b0b8f1d5c449d5106e7a8efc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14e0cc0b87aa1e5c1d47deb176d179a9192cbf82a13aadff4d173d03cb0b5bc5"}
{"level":"info","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35cdcec0d30377a4662d54c55bdac4b6e48ccd76b0b8f1d5c449d5106e7a8efc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14e0cc0b87aa1e5c1d47deb176d179a9192cbf82a13aadff4d173d03cb0b5bc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:10:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:10:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["14e0cc0b87aa1e5c1d47deb176d179a9192cbf82a13aadff4d173d03cb0b5bc5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35cdcec0d30377a4662d54c55bdac4b6e48ccd76b0b8f1d5c449d5106e7a8efc"}
{"level":"info","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14e0cc0b87aa1e5c1d47deb176d179a9192cbf82a13aadff4d173d03cb0b5bc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35cdcec0d30377a4662d54c55bdac4b6e48ccd76b0b8f1d5c449d5106e7a8efc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14e0cc0b87aa1e5c1d47deb176d179a9192cbf82a13aadff4d173d03cb0b5bc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:10:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:10:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14e0cc0b87aa1e5c1d47deb176d179a9192cbf82a13aadff4d173d03cb0b5bc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14e0cc0b87aa1e5c1d47deb176d179a9192cbf82a13aadff4d173d03cb0b5bc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14e0cc0b87aa1e5c1d47deb176d179a9192cbf82a13aadff4d173d03cb0b5bc5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14e0cc0b87aa1e5c1d47deb176d179a9192cbf82a13aadff4d173d03cb0b5bc5"}
{"level":"debug","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"147f90bf806f85f26aa9ec98285785ca24664b4ab6153eedc0add153d375cb53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:10:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:10:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"147f90bf806f85f26aa9ec98285785ca24664b4ab6153eedc0add153d375cb53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14e0cc0b87aa1e5c1d47deb176d179a9192cbf82a13aadff4d173d03cb0b5bc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:10:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:10:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["14e0cc0b87aa1e5c1d47deb176d179a9192cbf82a13aadff4d173d03cb0b5bc5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35cdcec0d30377a4662d54c55bdac4b6e48ccd76b0b8f1d5c449d5106e7a8efc"}
{"level":"info","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14e0cc0b87aa1e5c1d47deb176d179a9192cbf82a13aadff4d173d03cb0b5bc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"147f90bf806f85f26aa9ec98285785ca24664b4ab6153eedc0add153d375cb53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14e0cc0b87aa1e5c1d47deb176d179a9192cbf82a13aadff4d173d03cb0b5bc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:10:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:10:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14e0cc0b87aa1e5c1d47deb176d179a9192cbf82a13aadff4d173d03cb0b5bc5"}
{"level":"info","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14e0cc0b87aa1e5c1d47deb176d179a9192cbf82a13aadff4d173d03cb0b5bc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"147f90bf806f85f26aa9ec98285785ca24664b4ab6153eedc0add153d375cb53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:10:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:10:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"147f90bf806f85f26aa9ec98285785ca24664b4ab6153eedc0add153d375cb53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14e0cc0b87aa1e5c1d47deb176d179a9192cbf82a13aadff4d173d03cb0b5bc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:10:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:10:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["14e0cc0b87aa1e5c1d47deb176d179a9192cbf82a13aadff4d173d03cb0b5bc5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/147f90bf806f85f26aa9ec98285785ca24664b4ab6153eedc0add153d375cb53"}
{"level":"info","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14e0cc0b87aa1e5c1d47deb176d179a9192cbf82a13aadff4d173d03cb0b5bc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"147f90bf806f85f26aa9ec98285785ca24664b4ab6153eedc0add153d375cb53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:10:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:10:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["147f90bf806f85f26aa9ec98285785ca24664b4ab6153eedc0add153d375cb53"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"147f90bf806f85f26aa9ec98285785ca24664b4ab6153eedc0add153d375cb53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14e0cc0b87aa1e5c1d47deb176d179a9192cbf82a13aadff4d173d03cb0b5bc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:10:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:10:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14e0cc0b87aa1e5c1d47deb176d179a9192cbf82a13aadff4d173d03cb0b5bc5"}
{"level":"info","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14e0cc0b87aa1e5c1d47deb176d179a9192cbf82a13aadff4d173d03cb0b5bc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"147f90bf806f85f26aa9ec98285785ca24664b4ab6153eedc0add153d375cb53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:10:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:10:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"147f90bf806f85f26aa9ec98285785ca24664b4ab6153eedc0add153d375cb53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14e0cc0b87aa1e5c1d47deb176d179a9192cbf82a13aadff4d173d03cb0b5bc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:10:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:10:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["14e0cc0b87aa1e5c1d47deb176d179a9192cbf82a13aadff4d173d03cb0b5bc5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/147f90bf806f85f26aa9ec98285785ca24664b4ab6153eedc0add153d375cb53"}
{"level":"info","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14e0cc0b87aa1e5c1d47deb176d179a9192cbf82a13aadff4d173d03cb0b5bc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2dae73deaaf7d38d2f2239c40ff20712b9e6799e55c10cf208bcc4166bae5ca7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:10:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:10:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14e0cc0b87aa1e5c1d47deb176d179a9192cbf82a13aadff4d173d03cb0b5bc5"}
{"level":"info","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2dae73deaaf7d38d2f2239c40ff20712b9e6799e55c10cf208bcc4166bae5ca7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"147f90bf806f85f26aa9ec98285785ca24664b4ab6153eedc0add153d375cb53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:10:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:10:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["147f90bf806f85f26aa9ec98285785ca24664b4ab6153eedc0add153d375cb53"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"147f90bf806f85f26aa9ec98285785ca24664b4ab6153eedc0add153d375cb53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14e0cc0b87aa1e5c1d47deb176d179a9192cbf82a13aadff4d173d03cb0b5bc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2dae73deaaf7d38d2f2239c40ff20712b9e6799e55c10cf208bcc4166bae5ca7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:10:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:10:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2dae73deaaf7d38d2f2239c40ff20712b9e6799e55c10cf208bcc4166bae5ca7"}
{"level":"info","ts":"2026-07-05T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2dae73deaaf7d38d2f2239c40ff20712b9e6799e55c10cf208bcc4166bae5ca7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"147f90bf806f85f26aa9ec98285785ca24664b4ab6153eedc0add153d375cb53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:10:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:10:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"147f90bf806f85f26aa9ec98285785ca24664b4ab6153eedc0add153d375cb53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2dae73deaaf7d38d2f2239c40ff20712b9e6799e55c10cf208bcc4166bae5ca7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:10:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:10:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2dae73deaaf7d38d2f2239c40ff20712b9e6799e55c10cf208bcc4166bae5ca7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/147f90bf806f85f26aa9ec98285785ca24664b4ab6153eedc0add153d375cb53"}
{"level":"info","ts":"2026-07-05T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2dae73deaaf7d38d2f2239c40ff20712b9e6799e55c10cf208bcc4166bae5ca7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"147f90bf806f85f26aa9ec98285785ca24664b4ab6153eedc0add153d375cb53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:10:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:10:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["147f90bf806f85f26aa9ec98285785ca24664b4ab6153eedc0add153d375cb53"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14e0cc0b87aa1e5c1d47deb176d179a9192cbf82a13aadff4d173d03cb0b5bc5"}
{"level":"info","ts":"2026-07-05T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"147f90bf806f85f26aa9ec98285785ca24664b4ab6153eedc0add153d375cb53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2dae73deaaf7d38d2f2239c40ff20712b9e6799e55c10cf208bcc4166bae5ca7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:10:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:10:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2dae73deaaf7d38d2f2239c40ff20712b9e6799e55c10cf208bcc4166bae5ca7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"147f90bf806f85f26aa9ec98285785ca24664b4ab6153eedc0add153d375cb53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e620ad007ff41acd586aaa2cb6ac023eff054525c30717e1861631e9a2a8ed1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:10:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:10:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2dae73deaaf7d38d2f2239c40ff20712b9e6799e55c10cf208bcc4166bae5ca7"}
{"level":"info","ts":"2026-07-05T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e620ad007ff41acd586aaa2cb6ac023eff054525c30717e1861631e9a2a8ed1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2dae73deaaf7d38d2f2239c40ff20712b9e6799e55c10cf208bcc4166bae5ca7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:10:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:10:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2dae73deaaf7d38d2f2239c40ff20712b9e6799e55c10cf208bcc4166bae5ca7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2dae73deaaf7d38d2f2239c40ff20712b9e6799e55c10cf208bcc4166bae5ca7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e620ad007ff41acd586aaa2cb6ac023eff054525c30717e1861631e9a2a8ed1c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/147f90bf806f85f26aa9ec98285785ca24664b4ab6153eedc0add153d375cb53"}
{"level":"debug","ts":"2026-07-05T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2dae73deaaf7d38d2f2239c40ff20712b9e6799e55c10cf208bcc4166bae5ca7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e620ad007ff41acd586aaa2cb6ac023eff054525c30717e1861631e9a2a8ed1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:10:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:10:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e620ad007ff41acd586aaa2cb6ac023eff054525c30717e1861631e9a2a8ed1c"}
{"level":"info","ts":"2026-07-05T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e620ad007ff41acd586aaa2cb6ac023eff054525c30717e1861631e9a2a8ed1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e620ad007ff41acd586aaa2cb6ac023eff054525c30717e1861631e9a2a8ed1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:10:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:10:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e620ad007ff41acd586aaa2cb6ac023eff054525c30717e1861631e9a2a8ed1c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e620ad007ff41acd586aaa2cb6ac023eff054525c30717e1861631e9a2a8ed1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e620ad007ff41acd586aaa2cb6ac023eff054525c30717e1861631e9a2a8ed1c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2dae73deaaf7d38d2f2239c40ff20712b9e6799e55c10cf208bcc4166bae5ca7"}
{"level":"debug","ts":"2026-07-05T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e620ad007ff41acd586aaa2cb6ac023eff054525c30717e1861631e9a2a8ed1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:10:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:10:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e620ad007ff41acd586aaa2cb6ac023eff054525c30717e1861631e9a2a8ed1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e620ad007ff41acd586aaa2cb6ac023eff054525c30717e1861631e9a2a8ed1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e620ad007ff41acd586aaa2cb6ac023eff054525c30717e1861631e9a2a8ed1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48dd1fa082807141e1ea502cefe44209170589f06fdc7194bd37152445feef93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:10:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:10:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e620ad007ff41acd586aaa2cb6ac023eff054525c30717e1861631e9a2a8ed1c"}
{"level":"info","ts":"2026-07-05T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48dd1fa082807141e1ea502cefe44209170589f06fdc7194bd37152445feef93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48dd1fa082807141e1ea502cefe44209170589f06fdc7194bd37152445feef93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:10:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:10:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48dd1fa082807141e1ea502cefe44209170589f06fdc7194bd37152445feef93"}
{"level":"info","ts":"2026-07-05T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48dd1fa082807141e1ea502cefe44209170589f06fdc7194bd37152445feef93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e620ad007ff41acd586aaa2cb6ac023eff054525c30717e1861631e9a2a8ed1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48dd1fa082807141e1ea502cefe44209170589f06fdc7194bd37152445feef93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:10:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:10:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48dd1fa082807141e1ea502cefe44209170589f06fdc7194bd37152445feef93"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-05T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"48dd1fa082807141e1ea502cefe44209170589f06fdc7194bd37152445feef93","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"48dd1fa082807141e1ea502cefe44209170589f06fdc7194bd37152445feef93\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-05T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48dd1fa082807141e1ea502cefe44209170589f06fdc7194bd37152445feef93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:10:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:10:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48dd1fa082807141e1ea502cefe44209170589f06fdc7194bd37152445feef93"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e620ad007ff41acd586aaa2cb6ac023eff054525c30717e1861631e9a2a8ed1c"}
{"level":"info","ts":"2026-07-05T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48dd1fa082807141e1ea502cefe44209170589f06fdc7194bd37152445feef93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48dd1fa082807141e1ea502cefe44209170589f06fdc7194bd37152445feef93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48dd1fa082807141e1ea502cefe44209170589f06fdc7194bd37152445feef93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:10:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:10:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48dd1fa082807141e1ea502cefe44209170589f06fdc7194bd37152445feef93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48dd1fa082807141e1ea502cefe44209170589f06fdc7194bd37152445feef93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:10:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:10:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48dd1fa082807141e1ea502cefe44209170589f06fdc7194bd37152445feef93"}
{"level":"error","ts":"2026-07-05T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"48dd1fa082807141e1ea502cefe44209170589f06fdc7194bd37152445feef93","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"48dd1fa082807141e1ea502cefe44209170589f06fdc7194bd37152445feef93\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-05T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e620ad007ff41acd586aaa2cb6ac023eff054525c30717e1861631e9a2a8ed1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:10:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:10:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e620ad007ff41acd586aaa2cb6ac023eff054525c30717e1861631e9a2a8ed1c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48dd1fa082807141e1ea502cefe44209170589f06fdc7194bd37152445feef93"}
{"level":"info","ts":"2026-07-05T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e620ad007ff41acd586aaa2cb6ac023eff054525c30717e1861631e9a2a8ed1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48dd1fa082807141e1ea502cefe44209170589f06fdc7194bd37152445feef93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:10:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:10:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48dd1fa082807141e1ea502cefe44209170589f06fdc7194bd37152445feef93"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e620ad007ff41acd586aaa2cb6ac023eff054525c30717e1861631e9a2a8ed1c"}
{"level":"info","ts":"2026-07-05T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48dd1fa082807141e1ea502cefe44209170589f06fdc7194bd37152445feef93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e620ad007ff41acd586aaa2cb6ac023eff054525c30717e1861631e9a2a8ed1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48dd1fa082807141e1ea502cefe44209170589f06fdc7194bd37152445feef93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:10:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:10:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48dd1fa082807141e1ea502cefe44209170589f06fdc7194bd37152445feef93"}
{"level":"info","ts":"2026-07-05T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48dd1fa082807141e1ea502cefe44209170589f06fdc7194bd37152445feef93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48dd1fa082807141e1ea502cefe44209170589f06fdc7194bd37152445feef93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48dd1fa082807141e1ea502cefe44209170589f06fdc7194bd37152445feef93","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48dd1fa082807141e1ea502cefe44209170589f06fdc7194bd37152445feef93"}
{"level":"debug","ts":"2026-07-05T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48dd1fa082807141e1ea502cefe44209170589f06fdc7194bd37152445feef93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:10:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:10:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48dd1fa082807141e1ea502cefe44209170589f06fdc7194bd37152445feef93"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48dd1fa082807141e1ea502cefe44209170589f06fdc7194bd37152445feef93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48dd1fa082807141e1ea502cefe44209170589f06fdc7194bd37152445feef93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:10:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:10:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48dd1fa082807141e1ea502cefe44209170589f06fdc7194bd37152445feef93"}
{"level":"info","ts":"2026-07-05T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48dd1fa082807141e1ea502cefe44209170589f06fdc7194bd37152445feef93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48dd1fa082807141e1ea502cefe44209170589f06fdc7194bd37152445feef93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48dd1fa082807141e1ea502cefe44209170589f06fdc7194bd37152445feef93","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48dd1fa082807141e1ea502cefe44209170589f06fdc7194bd37152445feef93"}
{"level":"debug","ts":"2026-07-05T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48dd1fa082807141e1ea502cefe44209170589f06fdc7194bd37152445feef93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:10:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:10:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48dd1fa082807141e1ea502cefe44209170589f06fdc7194bd37152445feef93"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48dd1fa082807141e1ea502cefe44209170589f06fdc7194bd37152445feef93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48dd1fa082807141e1ea502cefe44209170589f06fdc7194bd37152445feef93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:10:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:10:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48dd1fa082807141e1ea502cefe44209170589f06fdc7194bd37152445feef93"}
{"level":"info","ts":"2026-07-05T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48dd1fa082807141e1ea502cefe44209170589f06fdc7194bd37152445feef93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48dd1fa082807141e1ea502cefe44209170589f06fdc7194bd37152445feef93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:10:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:10:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48dd1fa082807141e1ea502cefe44209170589f06fdc7194bd37152445feef93"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48dd1fa082807141e1ea502cefe44209170589f06fdc7194bd37152445feef93"}
{"level":"info","ts":"2026-07-05T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48dd1fa082807141e1ea502cefe44209170589f06fdc7194bd37152445feef93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48dd1fa082807141e1ea502cefe44209170589f06fdc7194bd37152445feef93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:10:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:10:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48dd1fa082807141e1ea502cefe44209170589f06fdc7194bd37152445feef93"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48dd1fa082807141e1ea502cefe44209170589f06fdc7194bd37152445feef93"}
{"level":"error","ts":"2026-07-05T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"48dd1fa082807141e1ea502cefe44209170589f06fdc7194bd37152445feef93","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"48dd1fa082807141e1ea502cefe44209170589f06fdc7194bd37152445feef93\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-05T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48dd1fa082807141e1ea502cefe44209170589f06fdc7194bd37152445feef93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48dd1fa082807141e1ea502cefe44209170589f06fdc7194bd37152445feef93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"147f90bf806f85f26aa9ec98285785ca24664b4ab6153eedc0add153d375cb53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:10:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:10:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"147f90bf806f85f26aa9ec98285785ca24664b4ab6153eedc0add153d375cb53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"147f90bf806f85f26aa9ec98285785ca24664b4ab6153eedc0add153d375cb53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"147f90bf806f85f26aa9ec98285785ca24664b4ab6153eedc0add153d375cb53","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/147f90bf806f85f26aa9ec98285785ca24664b4ab6153eedc0add153d375cb53"}
{"level":"debug","ts":"2026-07-05T20:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"147f90bf806f85f26aa9ec98285785ca24664b4ab6153eedc0add153d375cb53","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/147f90bf806f85f26aa9ec98285785ca24664b4ab6153eedc0add153d375cb53"}
{"level":"debug","ts":"2026-07-05T20:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"147f90bf806f85f26aa9ec98285785ca24664b4ab6153eedc0add153d375cb53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:10:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:10:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["147f90bf806f85f26aa9ec98285785ca24664b4ab6153eedc0add153d375cb53"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"147f90bf806f85f26aa9ec98285785ca24664b4ab6153eedc0add153d375cb53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"147f90bf806f85f26aa9ec98285785ca24664b4ab6153eedc0add153d375cb53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:10:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:10:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"147f90bf806f85f26aa9ec98285785ca24664b4ab6153eedc0add153d375cb53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"147f90bf806f85f26aa9ec98285785ca24664b4ab6153eedc0add153d375cb53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"147f90bf806f85f26aa9ec98285785ca24664b4ab6153eedc0add153d375cb53","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/147f90bf806f85f26aa9ec98285785ca24664b4ab6153eedc0add153d375cb53"}
{"level":"info","ts":"2026-07-05T20:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/147f90bf806f85f26aa9ec98285785ca24664b4ab6153eedc0add153d375cb53"}
{"level":"debug","ts":"2026-07-05T20:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"147f90bf806f85f26aa9ec98285785ca24664b4ab6153eedc0add153d375cb53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:10:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:10:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["147f90bf806f85f26aa9ec98285785ca24664b4ab6153eedc0add153d375cb53"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"147f90bf806f85f26aa9ec98285785ca24664b4ab6153eedc0add153d375cb53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"147f90bf806f85f26aa9ec98285785ca24664b4ab6153eedc0add153d375cb53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:10:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:10:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"147f90bf806f85f26aa9ec98285785ca24664b4ab6153eedc0add153d375cb53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"147f90bf806f85f26aa9ec98285785ca24664b4ab6153eedc0add153d375cb53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"147f90bf806f85f26aa9ec98285785ca24664b4ab6153eedc0add153d375cb53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"147f90bf806f85f26aa9ec98285785ca24664b4ab6153eedc0add153d375cb53","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/147f90bf806f85f26aa9ec98285785ca24664b4ab6153eedc0add153d375cb53"}
{"level":"info","ts":"2026-07-05T20:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/147f90bf806f85f26aa9ec98285785ca24664b4ab6153eedc0add153d375cb53"}
{"level":"debug","ts":"2026-07-05T20:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"147f90bf806f85f26aa9ec98285785ca24664b4ab6153eedc0add153d375cb53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:10:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:10:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["147f90bf806f85f26aa9ec98285785ca24664b4ab6153eedc0add153d375cb53"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"147f90bf806f85f26aa9ec98285785ca24664b4ab6153eedc0add153d375cb53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"147f90bf806f85f26aa9ec98285785ca24664b4ab6153eedc0add153d375cb53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:10:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:10:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"147f90bf806f85f26aa9ec98285785ca24664b4ab6153eedc0add153d375cb53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"147f90bf806f85f26aa9ec98285785ca24664b4ab6153eedc0add153d375cb53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"147f90bf806f85f26aa9ec98285785ca24664b4ab6153eedc0add153d375cb53","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/147f90bf806f85f26aa9ec98285785ca24664b4ab6153eedc0add153d375cb53"}
{"level":"debug","ts":"2026-07-05T20:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"147f90bf806f85f26aa9ec98285785ca24664b4ab6153eedc0add153d375cb53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b82072eed038e21123940f8a7e7e337df55dd77be406d0ea921fad79c179e65d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/147f90bf806f85f26aa9ec98285785ca24664b4ab6153eedc0add153d375cb53"}
{"level":"info","ts":"2026-07-05T20:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b82072eed038e21123940f8a7e7e337df55dd77be406d0ea921fad79c179e65d"}
{"level":"debug","ts":"2026-07-05T20:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"147f90bf806f85f26aa9ec98285785ca24664b4ab6153eedc0add153d375cb53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:10:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:10:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["147f90bf806f85f26aa9ec98285785ca24664b4ab6153eedc0add153d375cb53"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"147f90bf806f85f26aa9ec98285785ca24664b4ab6153eedc0add153d375cb53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"147f90bf806f85f26aa9ec98285785ca24664b4ab6153eedc0add153d375cb53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:10:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:10:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"147f90bf806f85f26aa9ec98285785ca24664b4ab6153eedc0add153d375cb53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"147f90bf806f85f26aa9ec98285785ca24664b4ab6153eedc0add153d375cb53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"147f90bf806f85f26aa9ec98285785ca24664b4ab6153eedc0add153d375cb53","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/147f90bf806f85f26aa9ec98285785ca24664b4ab6153eedc0add153d375cb53"}
{"level":"debug","ts":"2026-07-05T20:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"147f90bf806f85f26aa9ec98285785ca24664b4ab6153eedc0add153d375cb53","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/147f90bf806f85f26aa9ec98285785ca24664b4ab6153eedc0add153d375cb53"}
{"level":"debug","ts":"2026-07-05T20:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"147f90bf806f85f26aa9ec98285785ca24664b4ab6153eedc0add153d375cb53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:10:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:10:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["147f90bf806f85f26aa9ec98285785ca24664b4ab6153eedc0add153d375cb53"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"147f90bf806f85f26aa9ec98285785ca24664b4ab6153eedc0add153d375cb53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"147f90bf806f85f26aa9ec98285785ca24664b4ab6153eedc0add153d375cb53","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/147f90bf806f85f26aa9ec98285785ca24664b4ab6153eedc0add153d375cb53"}
{"level":"debug","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f3908a3501f897e8722d62558fe43c660e35918414ba4c234f05a43d8058afe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:10:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:10:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f3908a3501f897e8722d62558fe43c660e35918414ba4c234f05a43d8058afe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f3908a3501f897e8722d62558fe43c660e35918414ba4c234f05a43d8058afe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f3908a3501f897e8722d62558fe43c660e35918414ba4c234f05a43d8058afe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f3908a3501f897e8722d62558fe43c660e35918414ba4c234f05a43d8058afe"}
{"level":"debug","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f3908a3501f897e8722d62558fe43c660e35918414ba4c234f05a43d8058afe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f3908a3501f897e8722d62558fe43c660e35918414ba4c234f05a43d8058afe"}
{"level":"debug","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f3908a3501f897e8722d62558fe43c660e35918414ba4c234f05a43d8058afe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:10:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:10:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f3908a3501f897e8722d62558fe43c660e35918414ba4c234f05a43d8058afe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f3908a3501f897e8722d62558fe43c660e35918414ba4c234f05a43d8058afe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f3908a3501f897e8722d62558fe43c660e35918414ba4c234f05a43d8058afe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:10:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:10:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f3908a3501f897e8722d62558fe43c660e35918414ba4c234f05a43d8058afe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cfea72aaa55222eb7490d2faec8dd3013b7828ad84a8a859f5bae3116dea635","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f3908a3501f897e8722d62558fe43c660e35918414ba4c234f05a43d8058afe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f3908a3501f897e8722d62558fe43c660e35918414ba4c234f05a43d8058afe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f3908a3501f897e8722d62558fe43c660e35918414ba4c234f05a43d8058afe"}
{"level":"debug","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f3908a3501f897e8722d62558fe43c660e35918414ba4c234f05a43d8058afe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:10:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:10:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f3908a3501f897e8722d62558fe43c660e35918414ba4c234f05a43d8058afe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cfea72aaa55222eb7490d2faec8dd3013b7828ad84a8a859f5bae3116dea635"}
{"level":"info","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f3908a3501f897e8722d62558fe43c660e35918414ba4c234f05a43d8058afe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f3908a3501f897e8722d62558fe43c660e35918414ba4c234f05a43d8058afe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:10:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:10:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f3908a3501f897e8722d62558fe43c660e35918414ba4c234f05a43d8058afe"}
{"level":"info","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f3908a3501f897e8722d62558fe43c660e35918414ba4c234f05a43d8058afe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f3908a3501f897e8722d62558fe43c660e35918414ba4c234f05a43d8058afe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f3908a3501f897e8722d62558fe43c660e35918414ba4c234f05a43d8058afe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f3908a3501f897e8722d62558fe43c660e35918414ba4c234f05a43d8058afe"}
{"level":"debug","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f3908a3501f897e8722d62558fe43c660e35918414ba4c234f05a43d8058afe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f3908a3501f897e8722d62558fe43c660e35918414ba4c234f05a43d8058afe"}
{"level":"debug","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fc5fc830ab4bc920b82404287549a54e3fbb5417c0b1d1a46b99350c00245b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:10:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:10:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fc5fc830ab4bc920b82404287549a54e3fbb5417c0b1d1a46b99350c00245b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4fc5fc830ab4bc920b82404287549a54e3fbb5417c0b1d1a46b99350c00245b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4fc5fc830ab4bc920b82404287549a54e3fbb5417c0b1d1a46b99350c00245b3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4fc5fc830ab4bc920b82404287549a54e3fbb5417c0b1d1a46b99350c00245b3"}
{"level":"debug","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f3908a3501f897e8722d62558fe43c660e35918414ba4c234f05a43d8058afe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:10:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:10:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f3908a3501f897e8722d62558fe43c660e35918414ba4c234f05a43d8058afe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f3908a3501f897e8722d62558fe43c660e35918414ba4c234f05a43d8058afe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f3908a3501f897e8722d62558fe43c660e35918414ba4c234f05a43d8058afe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4fc5fc830ab4bc920b82404287549a54e3fbb5417c0b1d1a46b99350c00245b3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4fc5fc830ab4bc920b82404287549a54e3fbb5417c0b1d1a46b99350c00245b3"}
{"level":"info","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f3908a3501f897e8722d62558fe43c660e35918414ba4c234f05a43d8058afe"}
{"level":"debug","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fc5fc830ab4bc920b82404287549a54e3fbb5417c0b1d1a46b99350c00245b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:10:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:10:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4fc5fc830ab4bc920b82404287549a54e3fbb5417c0b1d1a46b99350c00245b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fc5fc830ab4bc920b82404287549a54e3fbb5417c0b1d1a46b99350c00245b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad4b9f1d7e7b1d005dfaf2c8de6522f639cbffc7106d9d98d01e9bd6d3b0473d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:10:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:10:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad4b9f1d7e7b1d005dfaf2c8de6522f639cbffc7106d9d98d01e9bd6d3b0473d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4fc5fc830ab4bc920b82404287549a54e3fbb5417c0b1d1a46b99350c00245b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad4b9f1d7e7b1d005dfaf2c8de6522f639cbffc7106d9d98d01e9bd6d3b0473d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad4b9f1d7e7b1d005dfaf2c8de6522f639cbffc7106d9d98d01e9bd6d3b0473d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad4b9f1d7e7b1d005dfaf2c8de6522f639cbffc7106d9d98d01e9bd6d3b0473d"}
{"level":"debug","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad4b9f1d7e7b1d005dfaf2c8de6522f639cbffc7106d9d98d01e9bd6d3b0473d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:10:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:10:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad4b9f1d7e7b1d005dfaf2c8de6522f639cbffc7106d9d98d01e9bd6d3b0473d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4fc5fc830ab4bc920b82404287549a54e3fbb5417c0b1d1a46b99350c00245b3"}
{"level":"info","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad4b9f1d7e7b1d005dfaf2c8de6522f639cbffc7106d9d98d01e9bd6d3b0473d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad4b9f1d7e7b1d005dfaf2c8de6522f639cbffc7106d9d98d01e9bd6d3b0473d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:10:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:10:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad4b9f1d7e7b1d005dfaf2c8de6522f639cbffc7106d9d98d01e9bd6d3b0473d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad4b9f1d7e7b1d005dfaf2c8de6522f639cbffc7106d9d98d01e9bd6d3b0473d"}
{"level":"debug","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad4b9f1d7e7b1d005dfaf2c8de6522f639cbffc7106d9d98d01e9bd6d3b0473d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad4b9f1d7e7b1d005dfaf2c8de6522f639cbffc7106d9d98d01e9bd6d3b0473d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad4b9f1d7e7b1d005dfaf2c8de6522f639cbffc7106d9d98d01e9bd6d3b0473d"}
{"level":"debug","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad4b9f1d7e7b1d005dfaf2c8de6522f639cbffc7106d9d98d01e9bd6d3b0473d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:10:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:10:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad4b9f1d7e7b1d005dfaf2c8de6522f639cbffc7106d9d98d01e9bd6d3b0473d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad4b9f1d7e7b1d005dfaf2c8de6522f639cbffc7106d9d98d01e9bd6d3b0473d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f21d2f02670bff0ad863de47365ed52f95312308ad00bbee49157fe5d7e7952","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:10:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:10:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f21d2f02670bff0ad863de47365ed52f95312308ad00bbee49157fe5d7e7952","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad4b9f1d7e7b1d005dfaf2c8de6522f639cbffc7106d9d98d01e9bd6d3b0473d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f21d2f02670bff0ad863de47365ed52f95312308ad00bbee49157fe5d7e7952","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f21d2f02670bff0ad863de47365ed52f95312308ad00bbee49157fe5d7e7952","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f21d2f02670bff0ad863de47365ed52f95312308ad00bbee49157fe5d7e7952"}
{"level":"debug","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f21d2f02670bff0ad863de47365ed52f95312308ad00bbee49157fe5d7e7952","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:10:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:10:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f21d2f02670bff0ad863de47365ed52f95312308ad00bbee49157fe5d7e7952"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad4b9f1d7e7b1d005dfaf2c8de6522f639cbffc7106d9d98d01e9bd6d3b0473d"}
{"level":"info","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f21d2f02670bff0ad863de47365ed52f95312308ad00bbee49157fe5d7e7952","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f21d2f02670bff0ad863de47365ed52f95312308ad00bbee49157fe5d7e7952","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:10:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:10:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f21d2f02670bff0ad863de47365ed52f95312308ad00bbee49157fe5d7e7952"}
{"level":"info","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f21d2f02670bff0ad863de47365ed52f95312308ad00bbee49157fe5d7e7952","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f21d2f02670bff0ad863de47365ed52f95312308ad00bbee49157fe5d7e7952","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f21d2f02670bff0ad863de47365ed52f95312308ad00bbee49157fe5d7e7952","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f21d2f02670bff0ad863de47365ed52f95312308ad00bbee49157fe5d7e7952"}
{"level":"debug","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f21d2f02670bff0ad863de47365ed52f95312308ad00bbee49157fe5d7e7952","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"523ae411d9be7bc158a1b321d59e4c0ceb924453ed99db4f0543d1758d4f3839","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f21d2f02670bff0ad863de47365ed52f95312308ad00bbee49157fe5d7e7952"}
{"level":"info","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/523ae411d9be7bc158a1b321d59e4c0ceb924453ed99db4f0543d1758d4f3839"}
{"level":"debug","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f21d2f02670bff0ad863de47365ed52f95312308ad00bbee49157fe5d7e7952","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:10:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:10:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f21d2f02670bff0ad863de47365ed52f95312308ad00bbee49157fe5d7e7952"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f21d2f02670bff0ad863de47365ed52f95312308ad00bbee49157fe5d7e7952","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f21d2f02670bff0ad863de47365ed52f95312308ad00bbee49157fe5d7e7952","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:10:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:10:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f21d2f02670bff0ad863de47365ed52f95312308ad00bbee49157fe5d7e7952","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f21d2f02670bff0ad863de47365ed52f95312308ad00bbee49157fe5d7e7952","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f21d2f02670bff0ad863de47365ed52f95312308ad00bbee49157fe5d7e7952","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f21d2f02670bff0ad863de47365ed52f95312308ad00bbee49157fe5d7e7952"}
{"level":"debug","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f21d2f02670bff0ad863de47365ed52f95312308ad00bbee49157fe5d7e7952","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f21d2f02670bff0ad863de47365ed52f95312308ad00bbee49157fe5d7e7952"}
{"level":"debug","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e66731ea90ea1fe32ea6313f1121b518c9e8592faa4ebb8cae036a4b62cacd7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e66731ea90ea1fe32ea6313f1121b518c9e8592faa4ebb8cae036a4b62cacd7"}
{"level":"debug","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f21d2f02670bff0ad863de47365ed52f95312308ad00bbee49157fe5d7e7952","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:10:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:10:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f21d2f02670bff0ad863de47365ed52f95312308ad00bbee49157fe5d7e7952"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f21d2f02670bff0ad863de47365ed52f95312308ad00bbee49157fe5d7e7952","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f21d2f02670bff0ad863de47365ed52f95312308ad00bbee49157fe5d7e7952","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:10:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:10:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f21d2f02670bff0ad863de47365ed52f95312308ad00bbee49157fe5d7e7952","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f21d2f02670bff0ad863de47365ed52f95312308ad00bbee49157fe5d7e7952","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f21d2f02670bff0ad863de47365ed52f95312308ad00bbee49157fe5d7e7952","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f21d2f02670bff0ad863de47365ed52f95312308ad00bbee49157fe5d7e7952"}
{"level":"debug","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f21d2f02670bff0ad863de47365ed52f95312308ad00bbee49157fe5d7e7952","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f21d2f02670bff0ad863de47365ed52f95312308ad00bbee49157fe5d7e7952"}
{"level":"debug","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"413f4ff53f75ddd9ef4cca2f6fda1188a307b0b9489eaef2387f6cd807f20b77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:10:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:10:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"413f4ff53f75ddd9ef4cca2f6fda1188a307b0b9489eaef2387f6cd807f20b77","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"413f4ff53f75ddd9ef4cca2f6fda1188a307b0b9489eaef2387f6cd807f20b77","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d33055d559dab775c74a1b7b358756562ed113076efb1ab1dfffe3cacc9f370b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"413f4ff53f75ddd9ef4cca2f6fda1188a307b0b9489eaef2387f6cd807f20b77","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/413f4ff53f75ddd9ef4cca2f6fda1188a307b0b9489eaef2387f6cd807f20b77"}
{"level":"debug","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f21d2f02670bff0ad863de47365ed52f95312308ad00bbee49157fe5d7e7952","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:10:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:10:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f21d2f02670bff0ad863de47365ed52f95312308ad00bbee49157fe5d7e7952"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f21d2f02670bff0ad863de47365ed52f95312308ad00bbee49157fe5d7e7952","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"413f4ff53f75ddd9ef4cca2f6fda1188a307b0b9489eaef2387f6cd807f20b77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:10:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:10:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["413f4ff53f75ddd9ef4cca2f6fda1188a307b0b9489eaef2387f6cd807f20b77"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d33055d559dab775c74a1b7b358756562ed113076efb1ab1dfffe3cacc9f370b"}
{"level":"info","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"413f4ff53f75ddd9ef4cca2f6fda1188a307b0b9489eaef2387f6cd807f20b77","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f21d2f02670bff0ad863de47365ed52f95312308ad00bbee49157fe5d7e7952","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"413f4ff53f75ddd9ef4cca2f6fda1188a307b0b9489eaef2387f6cd807f20b77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:10:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:10:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/413f4ff53f75ddd9ef4cca2f6fda1188a307b0b9489eaef2387f6cd807f20b77"}
{"level":"info","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"413f4ff53f75ddd9ef4cca2f6fda1188a307b0b9489eaef2387f6cd807f20b77","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"413f4ff53f75ddd9ef4cca2f6fda1188a307b0b9489eaef2387f6cd807f20b77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:10:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:10:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["413f4ff53f75ddd9ef4cca2f6fda1188a307b0b9489eaef2387f6cd807f20b77"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"413f4ff53f75ddd9ef4cca2f6fda1188a307b0b9489eaef2387f6cd807f20b77","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"413f4ff53f75ddd9ef4cca2f6fda1188a307b0b9489eaef2387f6cd807f20b77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:10:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:10:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["413f4ff53f75ddd9ef4cca2f6fda1188a307b0b9489eaef2387f6cd807f20b77"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f21d2f02670bff0ad863de47365ed52f95312308ad00bbee49157fe5d7e7952"}
{"level":"error","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"413f4ff53f75ddd9ef4cca2f6fda1188a307b0b9489eaef2387f6cd807f20b77","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"413f4ff53f75ddd9ef4cca2f6fda1188a307b0b9489eaef2387f6cd807f20b77\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"413f4ff53f75ddd9ef4cca2f6fda1188a307b0b9489eaef2387f6cd807f20b77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:10:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:10:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"413f4ff53f75ddd9ef4cca2f6fda1188a307b0b9489eaef2387f6cd807f20b77","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"413f4ff53f75ddd9ef4cca2f6fda1188a307b0b9489eaef2387f6cd807f20b77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:10:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:10:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/413f4ff53f75ddd9ef4cca2f6fda1188a307b0b9489eaef2387f6cd807f20b77"}
{"level":"error","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"413f4ff53f75ddd9ef4cca2f6fda1188a307b0b9489eaef2387f6cd807f20b77","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"413f4ff53f75ddd9ef4cca2f6fda1188a307b0b9489eaef2387f6cd807f20b77\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"413f4ff53f75ddd9ef4cca2f6fda1188a307b0b9489eaef2387f6cd807f20b77","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"413f4ff53f75ddd9ef4cca2f6fda1188a307b0b9489eaef2387f6cd807f20b77","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/413f4ff53f75ddd9ef4cca2f6fda1188a307b0b9489eaef2387f6cd807f20b77"}
{"level":"debug","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"413f4ff53f75ddd9ef4cca2f6fda1188a307b0b9489eaef2387f6cd807f20b77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:10:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:10:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["413f4ff53f75ddd9ef4cca2f6fda1188a307b0b9489eaef2387f6cd807f20b77"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"413f4ff53f75ddd9ef4cca2f6fda1188a307b0b9489eaef2387f6cd807f20b77","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4dff7344fa9f7ed73420b6ff4fb6785aba9c566bc8339cff6531ad48e5f11028","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:10:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:10:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4dff7344fa9f7ed73420b6ff4fb6785aba9c566bc8339cff6531ad48e5f11028","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"413f4ff53f75ddd9ef4cca2f6fda1188a307b0b9489eaef2387f6cd807f20b77","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e620ad007ff41acd586aaa2cb6ac023eff054525c30717e1861631e9a2a8ed1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4dff7344fa9f7ed73420b6ff4fb6785aba9c566bc8339cff6531ad48e5f11028","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4dff7344fa9f7ed73420b6ff4fb6785aba9c566bc8339cff6531ad48e5f11028"}
{"level":"debug","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4dff7344fa9f7ed73420b6ff4fb6785aba9c566bc8339cff6531ad48e5f11028","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:10:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:10:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4dff7344fa9f7ed73420b6ff4fb6785aba9c566bc8339cff6531ad48e5f11028"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4dff7344fa9f7ed73420b6ff4fb6785aba9c566bc8339cff6531ad48e5f11028","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14e0cc0b87aa1e5c1d47deb176d179a9192cbf82a13aadff4d173d03cb0b5bc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4dff7344fa9f7ed73420b6ff4fb6785aba9c566bc8339cff6531ad48e5f11028","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/413f4ff53f75ddd9ef4cca2f6fda1188a307b0b9489eaef2387f6cd807f20b77"}
{"level":"debug","ts":"2026-07-05T20:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48dd1fa082807141e1ea502cefe44209170589f06fdc7194bd37152445feef93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72d544e981ccfbb5a392f5f1f57f2845df84f66180ab1f6b400c86911c0f8f38","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e620ad007ff41acd586aaa2cb6ac023eff054525c30717e1861631e9a2a8ed1c"}
{"level":"debug","ts":"2026-07-05T20:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cd73c0140d8a6e5f28ca20c3c5a798343e0b654820a2ccad27e8d7c922456e0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4dff7344fa9f7ed73420b6ff4fb6785aba9c566bc8339cff6531ad48e5f11028"}
{"level":"debug","ts":"2026-07-05T20:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35cdcec0d30377a4662d54c55bdac4b6e48ccd76b0b8f1d5c449d5106e7a8efc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14e0cc0b87aa1e5c1d47deb176d179a9192cbf82a13aadff4d173d03cb0b5bc5"}
{"level":"info","ts":"2026-07-05T20:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48dd1fa082807141e1ea502cefe44209170589f06fdc7194bd37152445feef93"}
{"level":"debug","ts":"2026-07-05T20:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b6e12c5e8e999af4adf079025c3820257b39ee3ab0e144ad3813047dea25fd3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72d544e981ccfbb5a392f5f1f57f2845df84f66180ab1f6b400c86911c0f8f38"}
{"level":"debug","ts":"2026-07-05T20:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2dae73deaaf7d38d2f2239c40ff20712b9e6799e55c10cf208bcc4166bae5ca7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cd73c0140d8a6e5f28ca20c3c5a798343e0b654820a2ccad27e8d7c922456e0"}
{"level":"info","ts":"2026-07-05T20:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35cdcec0d30377a4662d54c55bdac4b6e48ccd76b0b8f1d5c449d5106e7a8efc"}
{"level":"info","ts":"2026-07-05T20:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b6e12c5e8e999af4adf079025c3820257b39ee3ab0e144ad3813047dea25fd3"}
{"level":"info","ts":"2026-07-05T20:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2dae73deaaf7d38d2f2239c40ff20712b9e6799e55c10cf208bcc4166bae5ca7"}
{"level":"info","ts":"2026-07-05T20:10:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b776640d-73ec-421b-917b-c534757f56f6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:56228","PortSpecifier":{"PortValue":56228}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b776640d-73ec-421b-917b-c534757f56f6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d9296f.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T20:10:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b776640d-73ec-421b-917b-c534757f56f6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:56228","PortSpecifier":{"PortValue":56228}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783282250,"nanos":727187782},"http":{"id":"b776640d-73ec-421b-917b-c534757f56f6","method":"POST","headers":{":authority":"e2e-shared-a-d9296f.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:10:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b776640d-73ec-421b-917b-c534757f56f6","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-05T20:10:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b776640d-73ec-421b-917b-c534757f56f6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"194493da-c643-4106-84be-40e77e620680","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=120c6712-5da3-498d-b760-248e4ea7ef6d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe635c3faecd"]}}
{"level":"debug","ts":"2026-07-05T20:10:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b776640d-73ec-421b-917b-c534757f56f6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe635c3faecd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=120c6712-5da3-498d-b760-248e4ea7ef6d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"194493da-c643-4106-84be-40e77e620680","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4cd73c0140d8a6e5f28ca20c3c5a798343e0b654820a2ccad27e8d7c922456e0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d9296f.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:10:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b776640d-73ec-421b-917b-c534757f56f6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:10:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b776640d-73ec-421b-917b-c534757f56f6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:10:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b776640d-73ec-421b-917b-c534757f56f6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d9296f/sub-test-model-d9296f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:10:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b776640d-73ec-421b-917b-c534757f56f6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-05T20:10:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b776640d-73ec-421b-917b-c534757f56f6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T20:10:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b776640d-73ec-421b-917b-c534757f56f6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-05T20:10:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b776640d-73ec-421b-917b-c534757f56f6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T20:10:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b776640d-73ec-421b-917b-c534757f56f6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T20:10:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e6503a71-d05a-45c2-9cf2-472cc974f999","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:38242","PortSpecifier":{"PortValue":38242}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e6503a71-d05a-45c2-9cf2-472cc974f999","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-65fb4d.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T20:10:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e6503a71-d05a-45c2-9cf2-472cc974f999","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:38242","PortSpecifier":{"PortValue":38242}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783282250,"nanos":766927990},"http":{"id":"e6503a71-d05a-45c2-9cf2-472cc974f999","method":"POST","headers":{":authority":"e2e-shared-b-65fb4d.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:10:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e6503a71-d05a-45c2-9cf2-472cc974f999","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-05T20:10:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e6503a71-d05a-45c2-9cf2-472cc974f999","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"194493da-c643-4106-84be-40e77e620680","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=120c6712-5da3-498d-b760-248e4ea7ef6d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe635c3faecd"]}}
{"level":"debug","ts":"2026-07-05T20:10:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e6503a71-d05a-45c2-9cf2-472cc974f999","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe635c3faecd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=120c6712-5da3-498d-b760-248e4ea7ef6d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"194493da-c643-4106-84be-40e77e620680","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ad4b9f1d7e7b1d005dfaf2c8de6522f639cbffc7106d9d98d01e9bd6d3b0473d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-65fb4d.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:10:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e6503a71-d05a-45c2-9cf2-472cc974f999","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:10:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e6503a71-d05a-45c2-9cf2-472cc974f999","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:10:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e6503a71-d05a-45c2-9cf2-472cc974f999","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-65fb4d/sub-test-model-65fb4d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:10:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e6503a71-d05a-45c2-9cf2-472cc974f999","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-05T20:10:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e6503a71-d05a-45c2-9cf2-472cc974f999","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T20:10:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e6503a71-d05a-45c2-9cf2-472cc974f999","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-05T20:10:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e6503a71-d05a-45c2-9cf2-472cc974f999","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T20:10:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e6503a71-d05a-45c2-9cf2-472cc974f999","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T20:10:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c63b52a2-f453-44d4-94c7-8e5cc7d5e41e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:56232","PortSpecifier":{"PortValue":56232}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c63b52a2-f453-44d4-94c7-8e5cc7d5e41e","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-d9296f.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T20:10:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c63b52a2-f453-44d4-94c7-8e5cc7d5e41e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:56232","PortSpecifier":{"PortValue":56232}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783282250,"nanos":810728040},"http":{"id":"c63b52a2-f453-44d4-94c7-8e5cc7d5e41e","method":"GET","headers":{":authority":"e2e-shared-a-d9296f.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:10:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c63b52a2-f453-44d4-94c7-8e5cc7d5e41e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-w8drHKzOEnzX2tcp_t16Hf3wterLno3hEQVNzFz5W5Rj5cOi0eM0Hj9pCXQ9"}
{"level":"debug","ts":"2026-07-05T20:10:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c63b52a2-f453-44d4-94c7-8e5cc7d5e41e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d9296f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-w8drHKzOEnzX2tcp_t16Hf3wterLno3hEQVNzFz5W5Rj5cOi0eM0Hj9pCXQ9\"}"}
{"level":"debug","ts":"2026-07-05T20:10:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c63b52a2-f453-44d4-94c7-8e5cc7d5e41e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d9296f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"58badc0e-4756-439a-854c-15f8d8de7c69","keyName":"e2e-sub-iso-adb2ae","subscription":"e2e-a-only-f3c529","tenant":"e2e-shared-a-d9296f","userId":"58badc0e-4756-439a-854c-15f8d8de7c69","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-05T20:10:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c63b52a2-f453-44d4-94c7-8e5cc7d5e41e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:10:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c63b52a2-f453-44d4-94c7-8e5cc7d5e41e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:10:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c63b52a2-f453-44d4-94c7-8e5cc7d5e41e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:10:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c63b52a2-f453-44d4-94c7-8e5cc7d5e41e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d9296f/sub-test-model-d9296f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:10:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c63b52a2-f453-44d4-94c7-8e5cc7d5e41e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-05T20:10:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c63b52a2-f453-44d4-94c7-8e5cc7d5e41e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T20:10:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c63b52a2-f453-44d4-94c7-8e5cc7d5e41e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-05T20:10:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c63b52a2-f453-44d4-94c7-8e5cc7d5e41e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-f3c529"}
{"level":"info","ts":"2026-07-05T20:10:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c63b52a2-f453-44d4-94c7-8e5cc7d5e41e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T20:10:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c63b52a2-f453-44d4-94c7-8e5cc7d5e41e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T20:10:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eeed4e40-1b8e-4abe-8725-33bf9cbd6e76","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:38254","PortSpecifier":{"PortValue":38254}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"eeed4e40-1b8e-4abe-8725-33bf9cbd6e76","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-65fb4d.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T20:10:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eeed4e40-1b8e-4abe-8725-33bf9cbd6e76","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:38254","PortSpecifier":{"PortValue":38254}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783282250,"nanos":848533433},"http":{"id":"eeed4e40-1b8e-4abe-8725-33bf9cbd6e76","method":"GET","headers":{":authority":"e2e-shared-b-65fb4d.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:10:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"eeed4e40-1b8e-4abe-8725-33bf9cbd6e76","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Sy5khI6yhzGXG17L_4cHQkN5V8doWTolm4HutxFD4a9M2LqDa9RfHUMwJLcN"}
{"level":"debug","ts":"2026-07-05T20:10:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"eeed4e40-1b8e-4abe-8725-33bf9cbd6e76","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-65fb4d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Sy5khI6yhzGXG17L_4cHQkN5V8doWTolm4HutxFD4a9M2LqDa9RfHUMwJLcN\"}"}
{"level":"debug","ts":"2026-07-05T20:10:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"eeed4e40-1b8e-4abe-8725-33bf9cbd6e76","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-65fb4d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"89fb7abd-64b0-4441-b845-8f886c9ff42d","keyName":"e2e-sub-iso-852c82","subscription":"e2e-b-only-f3c529","tenant":"e2e-shared-b-65fb4d","userId":"89fb7abd-64b0-4441-b845-8f886c9ff42d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-05T20:10:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"eeed4e40-1b8e-4abe-8725-33bf9cbd6e76","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:10:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eeed4e40-1b8e-4abe-8725-33bf9cbd6e76","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:10:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eeed4e40-1b8e-4abe-8725-33bf9cbd6e76","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:10:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eeed4e40-1b8e-4abe-8725-33bf9cbd6e76","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-65fb4d/sub-test-model-65fb4d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:10:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"eeed4e40-1b8e-4abe-8725-33bf9cbd6e76","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-05T20:10:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eeed4e40-1b8e-4abe-8725-33bf9cbd6e76","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T20:10:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eeed4e40-1b8e-4abe-8725-33bf9cbd6e76","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-f3c529"}
{"level":"debug","ts":"2026-07-05T20:10:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eeed4e40-1b8e-4abe-8725-33bf9cbd6e76","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-05T20:10:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eeed4e40-1b8e-4abe-8725-33bf9cbd6e76","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T20:10:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eeed4e40-1b8e-4abe-8725-33bf9cbd6e76","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T20:11:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a69848b7-f9ed-4e68-bf98-0176c1579ab4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:52354","PortSpecifier":{"PortValue":52354}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a69848b7-f9ed-4e68-bf98-0176c1579ab4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d9296f.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T20:11:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a69848b7-f9ed-4e68-bf98-0176c1579ab4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:52354","PortSpecifier":{"PortValue":52354}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783282260,"nanos":939745628},"http":{"id":"a69848b7-f9ed-4e68-bf98-0176c1579ab4","method":"POST","headers":{":authority":"e2e-shared-a-d9296f.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:11:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a69848b7-f9ed-4e68-bf98-0176c1579ab4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-05T20:11:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a69848b7-f9ed-4e68-bf98-0176c1579ab4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"194493da-c643-4106-84be-40e77e620680","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=120c6712-5da3-498d-b760-248e4ea7ef6d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe635c3faecd"]}}
{"level":"debug","ts":"2026-07-05T20:11:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a69848b7-f9ed-4e68-bf98-0176c1579ab4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe635c3faecd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=120c6712-5da3-498d-b760-248e4ea7ef6d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"194493da-c643-4106-84be-40e77e620680","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4cd73c0140d8a6e5f28ca20c3c5a798343e0b654820a2ccad27e8d7c922456e0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d9296f.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:11:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a69848b7-f9ed-4e68-bf98-0176c1579ab4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:11:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a69848b7-f9ed-4e68-bf98-0176c1579ab4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:11:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a69848b7-f9ed-4e68-bf98-0176c1579ab4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d9296f/sub-test-model-d9296f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:11:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a69848b7-f9ed-4e68-bf98-0176c1579ab4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-05T20:11:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a69848b7-f9ed-4e68-bf98-0176c1579ab4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T20:11:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a69848b7-f9ed-4e68-bf98-0176c1579ab4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-05T20:11:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a69848b7-f9ed-4e68-bf98-0176c1579ab4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T20:11:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a69848b7-f9ed-4e68-bf98-0176c1579ab4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T20:11:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bcbe68da-13df-4d44-a1d6-ee52ec7fb330","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:33990","PortSpecifier":{"PortValue":33990}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bcbe68da-13df-4d44-a1d6-ee52ec7fb330","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-65fb4d.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T20:11:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bcbe68da-13df-4d44-a1d6-ee52ec7fb330","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:33990","PortSpecifier":{"PortValue":33990}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783282260,"nanos":973404431},"http":{"id":"bcbe68da-13df-4d44-a1d6-ee52ec7fb330","method":"POST","headers":{":authority":"e2e-shared-b-65fb4d.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:11:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bcbe68da-13df-4d44-a1d6-ee52ec7fb330","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-05T20:11:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bcbe68da-13df-4d44-a1d6-ee52ec7fb330","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"194493da-c643-4106-84be-40e77e620680","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=120c6712-5da3-498d-b760-248e4ea7ef6d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe635c3faecd"]}}
{"level":"debug","ts":"2026-07-05T20:11:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bcbe68da-13df-4d44-a1d6-ee52ec7fb330","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe635c3faecd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=120c6712-5da3-498d-b760-248e4ea7ef6d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"194493da-c643-4106-84be-40e77e620680","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ad4b9f1d7e7b1d005dfaf2c8de6522f639cbffc7106d9d98d01e9bd6d3b0473d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-65fb4d.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:11:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bcbe68da-13df-4d44-a1d6-ee52ec7fb330","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:11:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bcbe68da-13df-4d44-a1d6-ee52ec7fb330","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:11:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bcbe68da-13df-4d44-a1d6-ee52ec7fb330","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-65fb4d/sub-test-model-65fb4d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:11:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bcbe68da-13df-4d44-a1d6-ee52ec7fb330","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-05T20:11:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bcbe68da-13df-4d44-a1d6-ee52ec7fb330","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T20:11:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bcbe68da-13df-4d44-a1d6-ee52ec7fb330","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-05T20:11:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bcbe68da-13df-4d44-a1d6-ee52ec7fb330","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T20:11:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bcbe68da-13df-4d44-a1d6-ee52ec7fb330","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T20:11:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f656aa66-fe4c-44d6-9134-6aeb27096705","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:52356","PortSpecifier":{"PortValue":52356}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f656aa66-fe4c-44d6-9134-6aeb27096705","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-d9296f.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T20:11:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f656aa66-fe4c-44d6-9134-6aeb27096705","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:52356","PortSpecifier":{"PortValue":52356}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783282261,"nanos":5699393},"http":{"id":"f656aa66-fe4c-44d6-9134-6aeb27096705","method":"POST","headers":{":authority":"e2e-shared-a-d9296f.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:11:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f656aa66-fe4c-44d6-9134-6aeb27096705","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-PqNr6XoqeJqdns3F_7qfpgITqcqd9FgNPAvUMdpwMMcvcn2W6Tz5ZsLghkc8"}
{"level":"debug","ts":"2026-07-05T20:11:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f656aa66-fe4c-44d6-9134-6aeb27096705","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d9296f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-PqNr6XoqeJqdns3F_7qfpgITqcqd9FgNPAvUMdpwMMcvcn2W6Tz5ZsLghkc8\"}"}
{"level":"debug","ts":"2026-07-05T20:11:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f656aa66-fe4c-44d6-9134-6aeb27096705","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d9296f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"09110d27-a050-4c68-a7d9-7d685dbfa79f","keyName":"e2e-sub-iso-b9b86b","subscription":"e2e-shared-sub-cf1c3a","tenant":"e2e-shared-a-d9296f","userId":"09110d27-a050-4c68-a7d9-7d685dbfa79f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-05T20:11:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f656aa66-fe4c-44d6-9134-6aeb27096705","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:11:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f656aa66-fe4c-44d6-9134-6aeb27096705","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:11:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f656aa66-fe4c-44d6-9134-6aeb27096705","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:11:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f656aa66-fe4c-44d6-9134-6aeb27096705","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d9296f/sub-test-model-d9296f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:11:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f656aa66-fe4c-44d6-9134-6aeb27096705","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-05T20:11:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f656aa66-fe4c-44d6-9134-6aeb27096705","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T20:11:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f656aa66-fe4c-44d6-9134-6aeb27096705","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-cf1c3a"}
{"level":"debug","ts":"2026-07-05T20:11:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f656aa66-fe4c-44d6-9134-6aeb27096705","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-05T20:11:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f656aa66-fe4c-44d6-9134-6aeb27096705","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T20:11:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f656aa66-fe4c-44d6-9134-6aeb27096705","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T20:11:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dfd81b5c-b531-4934-b816-9c7f36cd0461","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:34000","PortSpecifier":{"PortValue":34000}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dfd81b5c-b531-4934-b816-9c7f36cd0461","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-65fb4d.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T20:11:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dfd81b5c-b531-4934-b816-9c7f36cd0461","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:34000","PortSpecifier":{"PortValue":34000}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783282261,"nanos":33530510},"http":{"id":"dfd81b5c-b531-4934-b816-9c7f36cd0461","method":"POST","headers":{":authority":"e2e-shared-b-65fb4d.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:11:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dfd81b5c-b531-4934-b816-9c7f36cd0461","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1DG4XEn4CvFFxKasU_BNHZMoixwlJUD6RT3ijmOFK84HklFwccERCtLi2eIMB"}
{"level":"debug","ts":"2026-07-05T20:11:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dfd81b5c-b531-4934-b816-9c7f36cd0461","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-65fb4d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1DG4XEn4CvFFxKasU_BNHZMoixwlJUD6RT3ijmOFK84HklFwccERCtLi2eIMB\"}"}
{"level":"debug","ts":"2026-07-05T20:11:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dfd81b5c-b531-4934-b816-9c7f36cd0461","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-65fb4d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7799ba99-d18f-4d00-b221-282624385a8b","keyName":"e2e-sub-iso-248db8","subscription":"e2e-shared-sub-cf1c3a","tenant":"e2e-shared-b-65fb4d","userId":"7799ba99-d18f-4d00-b221-282624385a8b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-05T20:11:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dfd81b5c-b531-4934-b816-9c7f36cd0461","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:11:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dfd81b5c-b531-4934-b816-9c7f36cd0461","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:11:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dfd81b5c-b531-4934-b816-9c7f36cd0461","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:11:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dfd81b5c-b531-4934-b816-9c7f36cd0461","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-65fb4d/sub-test-model-65fb4d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:11:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"dfd81b5c-b531-4934-b816-9c7f36cd0461","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-05T20:11:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dfd81b5c-b531-4934-b816-9c7f36cd0461","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-05T20:11:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dfd81b5c-b531-4934-b816-9c7f36cd0461","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-cf1c3a"}
{"level":"debug","ts":"2026-07-05T20:11:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dfd81b5c-b531-4934-b816-9c7f36cd0461","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-05T20:11:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dfd81b5c-b531-4934-b816-9c7f36cd0461","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T20:11:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dfd81b5c-b531-4934-b816-9c7f36cd0461","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T20:11:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5cfea72aaa55222eb7490d2faec8dd3013b7828ad84a8a859f5bae3116dea635"}
{"level":"info","ts":"2026-07-05T20:11:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/523ae411d9be7bc158a1b321d59e4c0ceb924453ed99db4f0543d1758d4f3839"}
{"level":"info","ts":"2026-07-05T20:11:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1f21d2f02670bff0ad863de47365ed52f95312308ad00bbee49157fe5d7e7952"}
{"level":"info","ts":"2026-07-05T20:11:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2dae73deaaf7d38d2f2239c40ff20712b9e6799e55c10cf208bcc4166bae5ca7"}
{"level":"info","ts":"2026-07-05T20:11:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d33055d559dab775c74a1b7b358756562ed113076efb1ab1dfffe3cacc9f370b"}
{"level":"info","ts":"2026-07-05T20:11:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1f3908a3501f897e8722d62558fe43c660e35918414ba4c234f05a43d8058afe"}
{"level":"info","ts":"2026-07-05T20:11:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/72d544e981ccfbb5a392f5f1f57f2845df84f66180ab1f6b400c86911c0f8f38"}
{"level":"info","ts":"2026-07-05T20:11:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1e66731ea90ea1fe32ea6313f1121b518c9e8592faa4ebb8cae036a4b62cacd7"}
{"level":"info","ts":"2026-07-05T20:11:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4dff7344fa9f7ed73420b6ff4fb6785aba9c566bc8339cff6531ad48e5f11028"}
{"level":"info","ts":"2026-07-05T20:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/14e0cc0b87aa1e5c1d47deb176d179a9192cbf82a13aadff4d173d03cb0b5bc5"}
{"level":"info","ts":"2026-07-05T20:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b82072eed038e21123940f8a7e7e337df55dd77be406d0ea921fad79c179e65d"}
{"level":"info","ts":"2026-07-05T20:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e620ad007ff41acd586aaa2cb6ac023eff054525c30717e1861631e9a2a8ed1c"}
{"level":"info","ts":"2026-07-05T20:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/413f4ff53f75ddd9ef4cca2f6fda1188a307b0b9489eaef2387f6cd807f20b77"}
{"level":"info","ts":"2026-07-05T20:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/147f90bf806f85f26aa9ec98285785ca24664b4ab6153eedc0add153d375cb53"}
{"level":"info","ts":"2026-07-05T20:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/35cdcec0d30377a4662d54c55bdac4b6e48ccd76b0b8f1d5c449d5106e7a8efc"}
{"level":"info","ts":"2026-07-05T20:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/48dd1fa082807141e1ea502cefe44209170589f06fdc7194bd37152445feef93"}
{"level":"debug","ts":"2026-07-05T20:11:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7b5275760ece018e34a1e424681fe412e2f88fc047a4ab85d79e8ac8035deb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:11:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:11:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:11:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7b5275760ece018e34a1e424681fe412e2f88fc047a4ab85d79e8ac8035deb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7b5275760ece018e34a1e424681fe412e2f88fc047a4ab85d79e8ac8035deb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7b5275760ece018e34a1e424681fe412e2f88fc047a4ab85d79e8ac8035deb6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:11:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7b5275760ece018e34a1e424681fe412e2f88fc047a4ab85d79e8ac8035deb6"}
{"level":"debug","ts":"2026-07-05T20:11:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7b5275760ece018e34a1e424681fe412e2f88fc047a4ab85d79e8ac8035deb6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:11:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7b5275760ece018e34a1e424681fe412e2f88fc047a4ab85d79e8ac8035deb6"}
{"level":"debug","ts":"2026-07-05T20:11:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7b5275760ece018e34a1e424681fe412e2f88fc047a4ab85d79e8ac8035deb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:11:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:11:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c7b5275760ece018e34a1e424681fe412e2f88fc047a4ab85d79e8ac8035deb6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:11:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7b5275760ece018e34a1e424681fe412e2f88fc047a4ab85d79e8ac8035deb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7b5275760ece018e34a1e424681fe412e2f88fc047a4ab85d79e8ac8035deb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:11:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:11:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:11:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7b5275760ece018e34a1e424681fe412e2f88fc047a4ab85d79e8ac8035deb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7b5275760ece018e34a1e424681fe412e2f88fc047a4ab85d79e8ac8035deb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7b5275760ece018e34a1e424681fe412e2f88fc047a4ab85d79e8ac8035deb6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:11:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7b5275760ece018e34a1e424681fe412e2f88fc047a4ab85d79e8ac8035deb6"}
{"level":"debug","ts":"2026-07-05T20:11:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7b5275760ece018e34a1e424681fe412e2f88fc047a4ab85d79e8ac8035deb6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:11:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7b5275760ece018e34a1e424681fe412e2f88fc047a4ab85d79e8ac8035deb6"}
{"level":"debug","ts":"2026-07-05T20:11:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7b5275760ece018e34a1e424681fe412e2f88fc047a4ab85d79e8ac8035deb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:11:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:11:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c7b5275760ece018e34a1e424681fe412e2f88fc047a4ab85d79e8ac8035deb6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:11:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7b5275760ece018e34a1e424681fe412e2f88fc047a4ab85d79e8ac8035deb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7b5275760ece018e34a1e424681fe412e2f88fc047a4ab85d79e8ac8035deb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:11:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:11:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:11:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7b5275760ece018e34a1e424681fe412e2f88fc047a4ab85d79e8ac8035deb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7b5275760ece018e34a1e424681fe412e2f88fc047a4ab85d79e8ac8035deb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7b5275760ece018e34a1e424681fe412e2f88fc047a4ab85d79e8ac8035deb6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:11:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7b5275760ece018e34a1e424681fe412e2f88fc047a4ab85d79e8ac8035deb6"}
{"level":"debug","ts":"2026-07-05T20:11:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7b5275760ece018e34a1e424681fe412e2f88fc047a4ab85d79e8ac8035deb6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:11:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7b5275760ece018e34a1e424681fe412e2f88fc047a4ab85d79e8ac8035deb6"}
{"level":"debug","ts":"2026-07-05T20:11:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7b5275760ece018e34a1e424681fe412e2f88fc047a4ab85d79e8ac8035deb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:11:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:11:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c7b5275760ece018e34a1e424681fe412e2f88fc047a4ab85d79e8ac8035deb6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:11:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7b5275760ece018e34a1e424681fe412e2f88fc047a4ab85d79e8ac8035deb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7b5275760ece018e34a1e424681fe412e2f88fc047a4ab85d79e8ac8035deb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:11:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:11:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:11:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7b5275760ece018e34a1e424681fe412e2f88fc047a4ab85d79e8ac8035deb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7b5275760ece018e34a1e424681fe412e2f88fc047a4ab85d79e8ac8035deb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7b5275760ece018e34a1e424681fe412e2f88fc047a4ab85d79e8ac8035deb6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:11:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7b5275760ece018e34a1e424681fe412e2f88fc047a4ab85d79e8ac8035deb6"}
{"level":"debug","ts":"2026-07-05T20:11:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7b5275760ece018e34a1e424681fe412e2f88fc047a4ab85d79e8ac8035deb6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:11:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7b5275760ece018e34a1e424681fe412e2f88fc047a4ab85d79e8ac8035deb6"}
{"level":"debug","ts":"2026-07-05T20:11:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7b5275760ece018e34a1e424681fe412e2f88fc047a4ab85d79e8ac8035deb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:11:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:11:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c7b5275760ece018e34a1e424681fe412e2f88fc047a4ab85d79e8ac8035deb6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:11:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7b5275760ece018e34a1e424681fe412e2f88fc047a4ab85d79e8ac8035deb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7b5275760ece018e34a1e424681fe412e2f88fc047a4ab85d79e8ac8035deb6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:11:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7b5275760ece018e34a1e424681fe412e2f88fc047a4ab85d79e8ac8035deb6"}
{"level":"debug","ts":"2026-07-05T20:11:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34951b936d3776c43a9fe08aac8ef6173640e2a0de205268de142a4a37da1cb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:11:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:11:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:11:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34951b936d3776c43a9fe08aac8ef6173640e2a0de205268de142a4a37da1cb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34951b936d3776c43a9fe08aac8ef6173640e2a0de205268de142a4a37da1cb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34951b936d3776c43a9fe08aac8ef6173640e2a0de205268de142a4a37da1cb5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:11:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34951b936d3776c43a9fe08aac8ef6173640e2a0de205268de142a4a37da1cb5"}
{"level":"debug","ts":"2026-07-05T20:11:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34951b936d3776c43a9fe08aac8ef6173640e2a0de205268de142a4a37da1cb5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:11:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34951b936d3776c43a9fe08aac8ef6173640e2a0de205268de142a4a37da1cb5"}
{"level":"debug","ts":"2026-07-05T20:11:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34951b936d3776c43a9fe08aac8ef6173640e2a0de205268de142a4a37da1cb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:11:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:11:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34951b936d3776c43a9fe08aac8ef6173640e2a0de205268de142a4a37da1cb5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:11:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34951b936d3776c43a9fe08aac8ef6173640e2a0de205268de142a4a37da1cb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34951b936d3776c43a9fe08aac8ef6173640e2a0de205268de142a4a37da1cb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:11:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:11:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:11:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34951b936d3776c43a9fe08aac8ef6173640e2a0de205268de142a4a37da1cb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30b5dae009ee2807290974e6b4f01845b4b815352d017f4bb8c16a6b61ab8819","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:11:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:11:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:11:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34951b936d3776c43a9fe08aac8ef6173640e2a0de205268de142a4a37da1cb5"}
{"level":"info","ts":"2026-07-05T20:11:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30b5dae009ee2807290974e6b4f01845b4b815352d017f4bb8c16a6b61ab8819","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34951b936d3776c43a9fe08aac8ef6173640e2a0de205268de142a4a37da1cb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:11:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:11:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34951b936d3776c43a9fe08aac8ef6173640e2a0de205268de142a4a37da1cb5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:11:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34951b936d3776c43a9fe08aac8ef6173640e2a0de205268de142a4a37da1cb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30b5dae009ee2807290974e6b4f01845b4b815352d017f4bb8c16a6b61ab8819","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:11:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:11:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:11:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30b5dae009ee2807290974e6b4f01845b4b815352d017f4bb8c16a6b61ab8819"}
{"level":"info","ts":"2026-07-05T20:11:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30b5dae009ee2807290974e6b4f01845b4b815352d017f4bb8c16a6b61ab8819","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34951b936d3776c43a9fe08aac8ef6173640e2a0de205268de142a4a37da1cb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:11:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:11:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:11:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34951b936d3776c43a9fe08aac8ef6173640e2a0de205268de142a4a37da1cb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30b5dae009ee2807290974e6b4f01845b4b815352d017f4bb8c16a6b61ab8819","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:11:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:11:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30b5dae009ee2807290974e6b4f01845b4b815352d017f4bb8c16a6b61ab8819"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:11:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34951b936d3776c43a9fe08aac8ef6173640e2a0de205268de142a4a37da1cb5"}
{"level":"info","ts":"2026-07-05T20:11:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30b5dae009ee2807290974e6b4f01845b4b815352d017f4bb8c16a6b61ab8819","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34951b936d3776c43a9fe08aac8ef6173640e2a0de205268de142a4a37da1cb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:11:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:11:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34951b936d3776c43a9fe08aac8ef6173640e2a0de205268de142a4a37da1cb5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:11:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30b5dae009ee2807290974e6b4f01845b4b815352d017f4bb8c16a6b61ab8819"}
{"level":"info","ts":"2026-07-05T20:11:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34951b936d3776c43a9fe08aac8ef6173640e2a0de205268de142a4a37da1cb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30b5dae009ee2807290974e6b4f01845b4b815352d017f4bb8c16a6b61ab8819","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34951b936d3776c43a9fe08aac8ef6173640e2a0de205268de142a4a37da1cb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:11:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:11:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:11:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34951b936d3776c43a9fe08aac8ef6173640e2a0de205268de142a4a37da1cb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34951b936d3776c43a9fe08aac8ef6173640e2a0de205268de142a4a37da1cb5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:11:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34951b936d3776c43a9fe08aac8ef6173640e2a0de205268de142a4a37da1cb5"}
{"level":"debug","ts":"2026-07-05T20:11:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34951b936d3776c43a9fe08aac8ef6173640e2a0de205268de142a4a37da1cb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:11:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:11:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34951b936d3776c43a9fe08aac8ef6173640e2a0de205268de142a4a37da1cb5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:11:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34951b936d3776c43a9fe08aac8ef6173640e2a0de205268de142a4a37da1cb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32d95c2a8fcd14bdab3f1c0cf60327ac29762f233e525fcf9783da2eab14d4c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:11:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:11:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:11:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30b5dae009ee2807290974e6b4f01845b4b815352d017f4bb8c16a6b61ab8819"}
{"level":"info","ts":"2026-07-05T20:11:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32d95c2a8fcd14bdab3f1c0cf60327ac29762f233e525fcf9783da2eab14d4c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34951b936d3776c43a9fe08aac8ef6173640e2a0de205268de142a4a37da1cb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:11:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:11:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:11:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34951b936d3776c43a9fe08aac8ef6173640e2a0de205268de142a4a37da1cb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32d95c2a8fcd14bdab3f1c0cf60327ac29762f233e525fcf9783da2eab14d4c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34951b936d3776c43a9fe08aac8ef6173640e2a0de205268de142a4a37da1cb5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:11:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34951b936d3776c43a9fe08aac8ef6173640e2a0de205268de142a4a37da1cb5"}
{"level":"debug","ts":"2026-07-05T20:11:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34951b936d3776c43a9fe08aac8ef6173640e2a0de205268de142a4a37da1cb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:11:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:11:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34951b936d3776c43a9fe08aac8ef6173640e2a0de205268de142a4a37da1cb5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:11:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34951b936d3776c43a9fe08aac8ef6173640e2a0de205268de142a4a37da1cb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32d95c2a8fcd14bdab3f1c0cf60327ac29762f233e525fcf9783da2eab14d4c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:11:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:11:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:11:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32d95c2a8fcd14bdab3f1c0cf60327ac29762f233e525fcf9783da2eab14d4c4"}
{"level":"info","ts":"2026-07-05T20:11:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32d95c2a8fcd14bdab3f1c0cf60327ac29762f233e525fcf9783da2eab14d4c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34951b936d3776c43a9fe08aac8ef6173640e2a0de205268de142a4a37da1cb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:11:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:11:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:11:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34951b936d3776c43a9fe08aac8ef6173640e2a0de205268de142a4a37da1cb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32d95c2a8fcd14bdab3f1c0cf60327ac29762f233e525fcf9783da2eab14d4c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:11:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:11:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["32d95c2a8fcd14bdab3f1c0cf60327ac29762f233e525fcf9783da2eab14d4c4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:11:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34951b936d3776c43a9fe08aac8ef6173640e2a0de205268de142a4a37da1cb5"}
{"level":"info","ts":"2026-07-05T20:11:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32d95c2a8fcd14bdab3f1c0cf60327ac29762f233e525fcf9783da2eab14d4c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34951b936d3776c43a9fe08aac8ef6173640e2a0de205268de142a4a37da1cb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:11:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:11:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34951b936d3776c43a9fe08aac8ef6173640e2a0de205268de142a4a37da1cb5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:11:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32d95c2a8fcd14bdab3f1c0cf60327ac29762f233e525fcf9783da2eab14d4c4"}
{"level":"info","ts":"2026-07-05T20:11:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34951b936d3776c43a9fe08aac8ef6173640e2a0de205268de142a4a37da1cb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32d95c2a8fcd14bdab3f1c0cf60327ac29762f233e525fcf9783da2eab14d4c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34951b936d3776c43a9fe08aac8ef6173640e2a0de205268de142a4a37da1cb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:11:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:11:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:11:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34951b936d3776c43a9fe08aac8ef6173640e2a0de205268de142a4a37da1cb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34951b936d3776c43a9fe08aac8ef6173640e2a0de205268de142a4a37da1cb5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:11:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34951b936d3776c43a9fe08aac8ef6173640e2a0de205268de142a4a37da1cb5"}
{"level":"debug","ts":"2026-07-05T20:11:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34951b936d3776c43a9fe08aac8ef6173640e2a0de205268de142a4a37da1cb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:11:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:11:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34951b936d3776c43a9fe08aac8ef6173640e2a0de205268de142a4a37da1cb5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:11:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34951b936d3776c43a9fe08aac8ef6173640e2a0de205268de142a4a37da1cb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34951b936d3776c43a9fe08aac8ef6173640e2a0de205268de142a4a37da1cb5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:11:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32d95c2a8fcd14bdab3f1c0cf60327ac29762f233e525fcf9783da2eab14d4c4"}
{"level":"info","ts":"2026-07-05T20:11:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34951b936d3776c43a9fe08aac8ef6173640e2a0de205268de142a4a37da1cb5"}
{"level":"debug","ts":"2026-07-05T20:11:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c4f99a6b97f246fabace8d56656496ea78154b654da65418215bc2db78ade4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:11:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:11:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:11:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c4f99a6b97f246fabace8d56656496ea78154b654da65418215bc2db78ade4b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c4f99a6b97f246fabace8d56656496ea78154b654da65418215bc2db78ade4b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c4f99a6b97f246fabace8d56656496ea78154b654da65418215bc2db78ade4b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:11:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c4f99a6b97f246fabace8d56656496ea78154b654da65418215bc2db78ade4b"}
{"level":"debug","ts":"2026-07-05T20:11:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c4f99a6b97f246fabace8d56656496ea78154b654da65418215bc2db78ade4b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9fd73cc03ccdf994c01e09a5f385c9ac51117742b18f7326a9b058a8299eb378","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:11:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:11:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:11:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c4f99a6b97f246fabace8d56656496ea78154b654da65418215bc2db78ade4b"}
{"level":"info","ts":"2026-07-05T20:11:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9fd73cc03ccdf994c01e09a5f385c9ac51117742b18f7326a9b058a8299eb378","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c4f99a6b97f246fabace8d56656496ea78154b654da65418215bc2db78ade4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:11:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:11:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c4f99a6b97f246fabace8d56656496ea78154b654da65418215bc2db78ade4b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:11:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c4f99a6b97f246fabace8d56656496ea78154b654da65418215bc2db78ade4b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9fd73cc03ccdf994c01e09a5f385c9ac51117742b18f7326a9b058a8299eb378","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:11:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:11:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:11:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9fd73cc03ccdf994c01e09a5f385c9ac51117742b18f7326a9b058a8299eb378"}
{"level":"info","ts":"2026-07-05T20:11:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9fd73cc03ccdf994c01e09a5f385c9ac51117742b18f7326a9b058a8299eb378","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c4f99a6b97f246fabace8d56656496ea78154b654da65418215bc2db78ade4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:11:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:11:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:11:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c4f99a6b97f246fabace8d56656496ea78154b654da65418215bc2db78ade4b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9fd73cc03ccdf994c01e09a5f385c9ac51117742b18f7326a9b058a8299eb378","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:11:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:11:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9fd73cc03ccdf994c01e09a5f385c9ac51117742b18f7326a9b058a8299eb378"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:11:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c4f99a6b97f246fabace8d56656496ea78154b654da65418215bc2db78ade4b"}
{"level":"info","ts":"2026-07-05T20:11:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9fd73cc03ccdf994c01e09a5f385c9ac51117742b18f7326a9b058a8299eb378","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c4f99a6b97f246fabace8d56656496ea78154b654da65418215bc2db78ade4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:11:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:11:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c4f99a6b97f246fabace8d56656496ea78154b654da65418215bc2db78ade4b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:11:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c4f99a6b97f246fabace8d56656496ea78154b654da65418215bc2db78ade4b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9fd73cc03ccdf994c01e09a5f385c9ac51117742b18f7326a9b058a8299eb378","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:11:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:11:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:11:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9fd73cc03ccdf994c01e09a5f385c9ac51117742b18f7326a9b058a8299eb378"}
{"level":"info","ts":"2026-07-05T20:11:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9fd73cc03ccdf994c01e09a5f385c9ac51117742b18f7326a9b058a8299eb378","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c4f99a6b97f246fabace8d56656496ea78154b654da65418215bc2db78ade4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:11:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:11:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:11:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c4f99a6b97f246fabace8d56656496ea78154b654da65418215bc2db78ade4b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9fd73cc03ccdf994c01e09a5f385c9ac51117742b18f7326a9b058a8299eb378","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:11:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:11:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9fd73cc03ccdf994c01e09a5f385c9ac51117742b18f7326a9b058a8299eb378"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:11:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c4f99a6b97f246fabace8d56656496ea78154b654da65418215bc2db78ade4b"}
{"level":"info","ts":"2026-07-05T20:11:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9fd73cc03ccdf994c01e09a5f385c9ac51117742b18f7326a9b058a8299eb378","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c4f99a6b97f246fabace8d56656496ea78154b654da65418215bc2db78ade4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:11:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:11:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c4f99a6b97f246fabace8d56656496ea78154b654da65418215bc2db78ade4b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:11:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9fd73cc03ccdf994c01e09a5f385c9ac51117742b18f7326a9b058a8299eb378"}
{"level":"info","ts":"2026-07-05T20:11:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c4f99a6b97f246fabace8d56656496ea78154b654da65418215bc2db78ade4b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e92c5899307f917b397acd0d0f68d4515d070326a975efebcbca7f15402a7272","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:11:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:11:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:11:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e92c5899307f917b397acd0d0f68d4515d070326a975efebcbca7f15402a7272","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9fd73cc03ccdf994c01e09a5f385c9ac51117742b18f7326a9b058a8299eb378","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c4f99a6b97f246fabace8d56656496ea78154b654da65418215bc2db78ade4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:11:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:11:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:11:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c4f99a6b97f246fabace8d56656496ea78154b654da65418215bc2db78ade4b"}
{"level":"info","ts":"2026-07-05T20:11:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c4f99a6b97f246fabace8d56656496ea78154b654da65418215bc2db78ade4b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e92c5899307f917b397acd0d0f68d4515d070326a975efebcbca7f15402a7272","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:11:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:11:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:11:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e92c5899307f917b397acd0d0f68d4515d070326a975efebcbca7f15402a7272","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c4f99a6b97f246fabace8d56656496ea78154b654da65418215bc2db78ade4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:11:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:11:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c4f99a6b97f246fabace8d56656496ea78154b654da65418215bc2db78ade4b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:11:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e92c5899307f917b397acd0d0f68d4515d070326a975efebcbca7f15402a7272"}
{"level":"info","ts":"2026-07-05T20:11:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c4f99a6b97f246fabace8d56656496ea78154b654da65418215bc2db78ade4b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e92c5899307f917b397acd0d0f68d4515d070326a975efebcbca7f15402a7272","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:11:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:11:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e92c5899307f917b397acd0d0f68d4515d070326a975efebcbca7f15402a7272"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:11:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9fd73cc03ccdf994c01e09a5f385c9ac51117742b18f7326a9b058a8299eb378"}
{"level":"info","ts":"2026-07-05T20:11:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e92c5899307f917b397acd0d0f68d4515d070326a975efebcbca7f15402a7272","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c4f99a6b97f246fabace8d56656496ea78154b654da65418215bc2db78ade4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:11:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:11:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:11:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c4f99a6b97f246fabace8d56656496ea78154b654da65418215bc2db78ade4b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e92c5899307f917b397acd0d0f68d4515d070326a975efebcbca7f15402a7272","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c4f99a6b97f246fabace8d56656496ea78154b654da65418215bc2db78ade4b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:11:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c4f99a6b97f246fabace8d56656496ea78154b654da65418215bc2db78ade4b"}
{"level":"debug","ts":"2026-07-05T20:11:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c4f99a6b97f246fabace8d56656496ea78154b654da65418215bc2db78ade4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:11:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:11:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c4f99a6b97f246fabace8d56656496ea78154b654da65418215bc2db78ade4b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:11:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c4f99a6b97f246fabace8d56656496ea78154b654da65418215bc2db78ade4b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c4f99a6b97f246fabace8d56656496ea78154b654da65418215bc2db78ade4b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:11:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e92c5899307f917b397acd0d0f68d4515d070326a975efebcbca7f15402a7272"}
{"level":"info","ts":"2026-07-05T20:11:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c4f99a6b97f246fabace8d56656496ea78154b654da65418215bc2db78ade4b"}
{"level":"debug","ts":"2026-07-05T20:11:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1f5bce244102ff39007c0930ff8c9627eb0680f0b5fe526507fe5be07e37f89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:11:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:11:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:11:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1f5bce244102ff39007c0930ff8c9627eb0680f0b5fe526507fe5be07e37f89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1f5bce244102ff39007c0930ff8c9627eb0680f0b5fe526507fe5be07e37f89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1f5bce244102ff39007c0930ff8c9627eb0680f0b5fe526507fe5be07e37f89","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:11:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1f5bce244102ff39007c0930ff8c9627eb0680f0b5fe526507fe5be07e37f89"}
{"level":"debug","ts":"2026-07-05T20:11:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1f5bce244102ff39007c0930ff8c9627eb0680f0b5fe526507fe5be07e37f89","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:11:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1f5bce244102ff39007c0930ff8c9627eb0680f0b5fe526507fe5be07e37f89"}
{"level":"debug","ts":"2026-07-05T20:11:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1f5bce244102ff39007c0930ff8c9627eb0680f0b5fe526507fe5be07e37f89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:11:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:11:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a1f5bce244102ff39007c0930ff8c9627eb0680f0b5fe526507fe5be07e37f89"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:11:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1f5bce244102ff39007c0930ff8c9627eb0680f0b5fe526507fe5be07e37f89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1f5bce244102ff39007c0930ff8c9627eb0680f0b5fe526507fe5be07e37f89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:11:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:11:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:11:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1f5bce244102ff39007c0930ff8c9627eb0680f0b5fe526507fe5be07e37f89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1f5bce244102ff39007c0930ff8c9627eb0680f0b5fe526507fe5be07e37f89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1f5bce244102ff39007c0930ff8c9627eb0680f0b5fe526507fe5be07e37f89","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:11:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1f5bce244102ff39007c0930ff8c9627eb0680f0b5fe526507fe5be07e37f89"}
{"level":"debug","ts":"2026-07-05T20:11:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1f5bce244102ff39007c0930ff8c9627eb0680f0b5fe526507fe5be07e37f89","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:11:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1f5bce244102ff39007c0930ff8c9627eb0680f0b5fe526507fe5be07e37f89"}
{"level":"debug","ts":"2026-07-05T20:11:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1f5bce244102ff39007c0930ff8c9627eb0680f0b5fe526507fe5be07e37f89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:11:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:11:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a1f5bce244102ff39007c0930ff8c9627eb0680f0b5fe526507fe5be07e37f89"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:11:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1f5bce244102ff39007c0930ff8c9627eb0680f0b5fe526507fe5be07e37f89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1f5bce244102ff39007c0930ff8c9627eb0680f0b5fe526507fe5be07e37f89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:11:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:11:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:11:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1f5bce244102ff39007c0930ff8c9627eb0680f0b5fe526507fe5be07e37f89"}
{"level":"info","ts":"2026-07-05T20:11:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1f5bce244102ff39007c0930ff8c9627eb0680f0b5fe526507fe5be07e37f89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1f5bce244102ff39007c0930ff8c9627eb0680f0b5fe526507fe5be07e37f89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1f5bce244102ff39007c0930ff8c9627eb0680f0b5fe526507fe5be07e37f89","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:11:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1f5bce244102ff39007c0930ff8c9627eb0680f0b5fe526507fe5be07e37f89"}
{"level":"debug","ts":"2026-07-05T20:11:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1f5bce244102ff39007c0930ff8c9627eb0680f0b5fe526507fe5be07e37f89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:11:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:11:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a1f5bce244102ff39007c0930ff8c9627eb0680f0b5fe526507fe5be07e37f89"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:11:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1f5bce244102ff39007c0930ff8c9627eb0680f0b5fe526507fe5be07e37f89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1f5bce244102ff39007c0930ff8c9627eb0680f0b5fe526507fe5be07e37f89","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:11:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1f5bce244102ff39007c0930ff8c9627eb0680f0b5fe526507fe5be07e37f89"}
{"level":"debug","ts":"2026-07-05T20:11:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e9bce44b2ab7b915d89113bb1af51084279cf940d684956815d341c431e5019","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:11:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:11:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:11:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e9bce44b2ab7b915d89113bb1af51084279cf940d684956815d341c431e5019","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e9bce44b2ab7b915d89113bb1af51084279cf940d684956815d341c431e5019","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e9bce44b2ab7b915d89113bb1af51084279cf940d684956815d341c431e5019","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:11:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e9bce44b2ab7b915d89113bb1af51084279cf940d684956815d341c431e5019"}
{"level":"debug","ts":"2026-07-05T20:11:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e9bce44b2ab7b915d89113bb1af51084279cf940d684956815d341c431e5019","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:11:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e9bce44b2ab7b915d89113bb1af51084279cf940d684956815d341c431e5019"}
{"level":"debug","ts":"2026-07-05T20:11:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e9bce44b2ab7b915d89113bb1af51084279cf940d684956815d341c431e5019","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:11:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:11:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5e9bce44b2ab7b915d89113bb1af51084279cf940d684956815d341c431e5019"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:11:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e9bce44b2ab7b915d89113bb1af51084279cf940d684956815d341c431e5019","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e9bce44b2ab7b915d89113bb1af51084279cf940d684956815d341c431e5019","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:11:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:11:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:11:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e9bce44b2ab7b915d89113bb1af51084279cf940d684956815d341c431e5019","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e442455723e6c69d34065414c754918099a84ad85029fbfca0e19e756d52db65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:11:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:11:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:11:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e9bce44b2ab7b915d89113bb1af51084279cf940d684956815d341c431e5019"}
{"level":"info","ts":"2026-07-05T20:11:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e442455723e6c69d34065414c754918099a84ad85029fbfca0e19e756d52db65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e9bce44b2ab7b915d89113bb1af51084279cf940d684956815d341c431e5019","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:11:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:11:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5e9bce44b2ab7b915d89113bb1af51084279cf940d684956815d341c431e5019"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:11:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e9bce44b2ab7b915d89113bb1af51084279cf940d684956815d341c431e5019","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e442455723e6c69d34065414c754918099a84ad85029fbfca0e19e756d52db65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:11:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:11:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:11:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e442455723e6c69d34065414c754918099a84ad85029fbfca0e19e756d52db65"}
{"level":"info","ts":"2026-07-05T20:11:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e442455723e6c69d34065414c754918099a84ad85029fbfca0e19e756d52db65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e9bce44b2ab7b915d89113bb1af51084279cf940d684956815d341c431e5019","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:11:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:11:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:11:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e9bce44b2ab7b915d89113bb1af51084279cf940d684956815d341c431e5019","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e442455723e6c69d34065414c754918099a84ad85029fbfca0e19e756d52db65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:11:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:11:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e442455723e6c69d34065414c754918099a84ad85029fbfca0e19e756d52db65"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:11:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e9bce44b2ab7b915d89113bb1af51084279cf940d684956815d341c431e5019"}
{"level":"info","ts":"2026-07-05T20:11:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e442455723e6c69d34065414c754918099a84ad85029fbfca0e19e756d52db65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e9bce44b2ab7b915d89113bb1af51084279cf940d684956815d341c431e5019","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:11:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:11:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5e9bce44b2ab7b915d89113bb1af51084279cf940d684956815d341c431e5019"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:11:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e442455723e6c69d34065414c754918099a84ad85029fbfca0e19e756d52db65"}
{"level":"info","ts":"2026-07-05T20:11:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e9bce44b2ab7b915d89113bb1af51084279cf940d684956815d341c431e5019","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e442455723e6c69d34065414c754918099a84ad85029fbfca0e19e756d52db65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e9bce44b2ab7b915d89113bb1af51084279cf940d684956815d341c431e5019","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:11:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:11:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:11:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e9bce44b2ab7b915d89113bb1af51084279cf940d684956815d341c431e5019","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30cda358b1b0c8ada24c7283cc6118c0d0c0ef3bd9b290c4762d4b7aae63663c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:11:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:11:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:11:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e9bce44b2ab7b915d89113bb1af51084279cf940d684956815d341c431e5019"}
{"level":"info","ts":"2026-07-05T20:11:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30cda358b1b0c8ada24c7283cc6118c0d0c0ef3bd9b290c4762d4b7aae63663c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e9bce44b2ab7b915d89113bb1af51084279cf940d684956815d341c431e5019","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:11:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:11:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5e9bce44b2ab7b915d89113bb1af51084279cf940d684956815d341c431e5019"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:11:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e9bce44b2ab7b915d89113bb1af51084279cf940d684956815d341c431e5019","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30cda358b1b0c8ada24c7283cc6118c0d0c0ef3bd9b290c4762d4b7aae63663c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e9bce44b2ab7b915d89113bb1af51084279cf940d684956815d341c431e5019","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:11:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e442455723e6c69d34065414c754918099a84ad85029fbfca0e19e756d52db65"}
{"level":"debug","ts":"2026-07-05T20:11:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30cda358b1b0c8ada24c7283cc6118c0d0c0ef3bd9b290c4762d4b7aae63663c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:11:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:11:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:11:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30cda358b1b0c8ada24c7283cc6118c0d0c0ef3bd9b290c4762d4b7aae63663c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:11:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30cda358b1b0c8ada24c7283cc6118c0d0c0ef3bd9b290c4762d4b7aae63663c"}
{"level":"debug","ts":"2026-07-05T20:11:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30cda358b1b0c8ada24c7283cc6118c0d0c0ef3bd9b290c4762d4b7aae63663c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:11:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:11:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30cda358b1b0c8ada24c7283cc6118c0d0c0ef3bd9b290c4762d4b7aae63663c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30cda358b1b0c8ada24c7283cc6118c0d0c0ef3bd9b290c4762d4b7aae63663c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30cda358b1b0c8ada24c7283cc6118c0d0c0ef3bd9b290c4762d4b7aae63663c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30cda358b1b0c8ada24c7283cc6118c0d0c0ef3bd9b290c4762d4b7aae63663c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e9bce44b2ab7b915d89113bb1af51084279cf940d684956815d341c431e5019"}
{"level":"info","ts":"2026-07-05T20:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30cda358b1b0c8ada24c7283cc6118c0d0c0ef3bd9b290c4762d4b7aae63663c"}
{"level":"debug","ts":"2026-07-05T20:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"342dff0f76b4f8fb6fceeb077a598870ef5966f33c33b1d90917e3fbcd461718","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:11:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:11:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"342dff0f76b4f8fb6fceeb077a598870ef5966f33c33b1d90917e3fbcd461718","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"342dff0f76b4f8fb6fceeb077a598870ef5966f33c33b1d90917e3fbcd461718","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"342dff0f76b4f8fb6fceeb077a598870ef5966f33c33b1d90917e3fbcd461718","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/342dff0f76b4f8fb6fceeb077a598870ef5966f33c33b1d90917e3fbcd461718"}
{"level":"debug","ts":"2026-07-05T20:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"342dff0f76b4f8fb6fceeb077a598870ef5966f33c33b1d90917e3fbcd461718","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/342dff0f76b4f8fb6fceeb077a598870ef5966f33c33b1d90917e3fbcd461718"}
{"level":"debug","ts":"2026-07-05T20:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"342dff0f76b4f8fb6fceeb077a598870ef5966f33c33b1d90917e3fbcd461718","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:11:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:11:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["342dff0f76b4f8fb6fceeb077a598870ef5966f33c33b1d90917e3fbcd461718"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"342dff0f76b4f8fb6fceeb077a598870ef5966f33c33b1d90917e3fbcd461718","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"342dff0f76b4f8fb6fceeb077a598870ef5966f33c33b1d90917e3fbcd461718","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60bf86d55aad97aa58c4d83e017c17f11be69180d6390eb8b8c608325fc6d284","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:11:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:11:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/342dff0f76b4f8fb6fceeb077a598870ef5966f33c33b1d90917e3fbcd461718"}
{"level":"info","ts":"2026-07-05T20:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60bf86d55aad97aa58c4d83e017c17f11be69180d6390eb8b8c608325fc6d284","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa19c5e864662748183d2f5e327f681f82630dbbf21aea1b8849733119adaf82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:11:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:11:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa19c5e864662748183d2f5e327f681f82630dbbf21aea1b8849733119adaf82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60bf86d55aad97aa58c4d83e017c17f11be69180d6390eb8b8c608325fc6d284","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:11:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:11:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60bf86d55aad97aa58c4d83e017c17f11be69180d6390eb8b8c608325fc6d284"}
{"level":"info","ts":"2026-07-05T20:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60bf86d55aad97aa58c4d83e017c17f11be69180d6390eb8b8c608325fc6d284","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa19c5e864662748183d2f5e327f681f82630dbbf21aea1b8849733119adaf82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:11:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:11:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa19c5e864662748183d2f5e327f681f82630dbbf21aea1b8849733119adaf82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60bf86d55aad97aa58c4d83e017c17f11be69180d6390eb8b8c608325fc6d284","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:11:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:11:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["60bf86d55aad97aa58c4d83e017c17f11be69180d6390eb8b8c608325fc6d284"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60bf86d55aad97aa58c4d83e017c17f11be69180d6390eb8b8c608325fc6d284","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa19c5e864662748183d2f5e327f681f82630dbbf21aea1b8849733119adaf82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60bf86d55aad97aa58c4d83e017c17f11be69180d6390eb8b8c608325fc6d284","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa19c5e864662748183d2f5e327f681f82630dbbf21aea1b8849733119adaf82"}
{"level":"debug","ts":"2026-07-05T20:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa19c5e864662748183d2f5e327f681f82630dbbf21aea1b8849733119adaf82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:11:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:11:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aa19c5e864662748183d2f5e327f681f82630dbbf21aea1b8849733119adaf82"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa19c5e864662748183d2f5e327f681f82630dbbf21aea1b8849733119adaf82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f1da078aad486df34cadd380b07369ca9aeeb024f33174b6d6a1363c3227089","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:11:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:11:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f1da078aad486df34cadd380b07369ca9aeeb024f33174b6d6a1363c3227089","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa19c5e864662748183d2f5e327f681f82630dbbf21aea1b8849733119adaf82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f1da078aad486df34cadd380b07369ca9aeeb024f33174b6d6a1363c3227089","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60bf86d55aad97aa58c4d83e017c17f11be69180d6390eb8b8c608325fc6d284"}
{"level":"debug","ts":"2026-07-05T20:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f1da078aad486df34cadd380b07369ca9aeeb024f33174b6d6a1363c3227089","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f1da078aad486df34cadd380b07369ca9aeeb024f33174b6d6a1363c3227089","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa19c5e864662748183d2f5e327f681f82630dbbf21aea1b8849733119adaf82"}
{"level":"info","ts":"2026-07-05T20:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f1da078aad486df34cadd380b07369ca9aeeb024f33174b6d6a1363c3227089"}
{"level":"debug","ts":"2026-07-05T20:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f1da078aad486df34cadd380b07369ca9aeeb024f33174b6d6a1363c3227089","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:11:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:11:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f1da078aad486df34cadd380b07369ca9aeeb024f33174b6d6a1363c3227089"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f1da078aad486df34cadd380b07369ca9aeeb024f33174b6d6a1363c3227089","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f1da078aad486df34cadd380b07369ca9aeeb024f33174b6d6a1363c3227089","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:11:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:11:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f1da078aad486df34cadd380b07369ca9aeeb024f33174b6d6a1363c3227089","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd8a35ef86981994abed12c65ac256dfbec8ca1bb61f427abb6253693e2aa29f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:11:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:11:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f1da078aad486df34cadd380b07369ca9aeeb024f33174b6d6a1363c3227089"}
{"level":"info","ts":"2026-07-05T20:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd8a35ef86981994abed12c65ac256dfbec8ca1bb61f427abb6253693e2aa29f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f1da078aad486df34cadd380b07369ca9aeeb024f33174b6d6a1363c3227089","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:11:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:11:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f1da078aad486df34cadd380b07369ca9aeeb024f33174b6d6a1363c3227089"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f1da078aad486df34cadd380b07369ca9aeeb024f33174b6d6a1363c3227089","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd8a35ef86981994abed12c65ac256dfbec8ca1bb61f427abb6253693e2aa29f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:11:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:11:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd8a35ef86981994abed12c65ac256dfbec8ca1bb61f427abb6253693e2aa29f"}
{"level":"info","ts":"2026-07-05T20:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd8a35ef86981994abed12c65ac256dfbec8ca1bb61f427abb6253693e2aa29f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f1da078aad486df34cadd380b07369ca9aeeb024f33174b6d6a1363c3227089","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:11:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:11:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f1da078aad486df34cadd380b07369ca9aeeb024f33174b6d6a1363c3227089","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd8a35ef86981994abed12c65ac256dfbec8ca1bb61f427abb6253693e2aa29f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:11:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:11:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd8a35ef86981994abed12c65ac256dfbec8ca1bb61f427abb6253693e2aa29f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f1da078aad486df34cadd380b07369ca9aeeb024f33174b6d6a1363c3227089"}
{"level":"info","ts":"2026-07-05T20:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd8a35ef86981994abed12c65ac256dfbec8ca1bb61f427abb6253693e2aa29f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f1da078aad486df34cadd380b07369ca9aeeb024f33174b6d6a1363c3227089","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:11:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:11:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f1da078aad486df34cadd380b07369ca9aeeb024f33174b6d6a1363c3227089"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f1da078aad486df34cadd380b07369ca9aeeb024f33174b6d6a1363c3227089","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd8a35ef86981994abed12c65ac256dfbec8ca1bb61f427abb6253693e2aa29f"}
{"level":"debug","ts":"2026-07-05T20:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd8a35ef86981994abed12c65ac256dfbec8ca1bb61f427abb6253693e2aa29f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f1da078aad486df34cadd380b07369ca9aeeb024f33174b6d6a1363c3227089","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:11:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:11:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f1da078aad486df34cadd380b07369ca9aeeb024f33174b6d6a1363c3227089","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f1da078aad486df34cadd380b07369ca9aeeb024f33174b6d6a1363c3227089","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f1da078aad486df34cadd380b07369ca9aeeb024f33174b6d6a1363c3227089","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f1da078aad486df34cadd380b07369ca9aeeb024f33174b6d6a1363c3227089"}
{"level":"debug","ts":"2026-07-05T20:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f1da078aad486df34cadd380b07369ca9aeeb024f33174b6d6a1363c3227089","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:11:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:11:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f1da078aad486df34cadd380b07369ca9aeeb024f33174b6d6a1363c3227089"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd8a35ef86981994abed12c65ac256dfbec8ca1bb61f427abb6253693e2aa29f"}
{"level":"info","ts":"2026-07-05T20:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f1da078aad486df34cadd380b07369ca9aeeb024f33174b6d6a1363c3227089","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f1da078aad486df34cadd380b07369ca9aeeb024f33174b6d6a1363c3227089","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:11:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:11:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f1da078aad486df34cadd380b07369ca9aeeb024f33174b6d6a1363c3227089"}
{"level":"info","ts":"2026-07-05T20:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f1da078aad486df34cadd380b07369ca9aeeb024f33174b6d6a1363c3227089","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f1da078aad486df34cadd380b07369ca9aeeb024f33174b6d6a1363c3227089","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f1da078aad486df34cadd380b07369ca9aeeb024f33174b6d6a1363c3227089","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f1da078aad486df34cadd380b07369ca9aeeb024f33174b6d6a1363c3227089"}
{"level":"debug","ts":"2026-07-05T20:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f1da078aad486df34cadd380b07369ca9aeeb024f33174b6d6a1363c3227089","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f1da078aad486df34cadd380b07369ca9aeeb024f33174b6d6a1363c3227089"}
{"level":"debug","ts":"2026-07-05T20:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f1da078aad486df34cadd380b07369ca9aeeb024f33174b6d6a1363c3227089","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:11:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:11:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f1da078aad486df34cadd380b07369ca9aeeb024f33174b6d6a1363c3227089"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f1da078aad486df34cadd380b07369ca9aeeb024f33174b6d6a1363c3227089","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f1da078aad486df34cadd380b07369ca9aeeb024f33174b6d6a1363c3227089","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f1da078aad486df34cadd380b07369ca9aeeb024f33174b6d6a1363c3227089"}
{"level":"debug","ts":"2026-07-05T20:12:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f1da078aad486df34cadd380b07369ca9aeeb024f33174b6d6a1363c3227089","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:12:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:12:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:12:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f1da078aad486df34cadd380b07369ca9aeeb024f33174b6d6a1363c3227089","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:12:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f1da078aad486df34cadd380b07369ca9aeeb024f33174b6d6a1363c3227089","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:12:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f1da078aad486df34cadd380b07369ca9aeeb024f33174b6d6a1363c3227089","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:12:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f1da078aad486df34cadd380b07369ca9aeeb024f33174b6d6a1363c3227089"}
{"level":"debug","ts":"2026-07-05T20:12:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f1da078aad486df34cadd380b07369ca9aeeb024f33174b6d6a1363c3227089","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:12:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f1da078aad486df34cadd380b07369ca9aeeb024f33174b6d6a1363c3227089"}
{"level":"debug","ts":"2026-07-05T20:12:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f1da078aad486df34cadd380b07369ca9aeeb024f33174b6d6a1363c3227089","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:12:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:12:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f1da078aad486df34cadd380b07369ca9aeeb024f33174b6d6a1363c3227089"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:12:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f1da078aad486df34cadd380b07369ca9aeeb024f33174b6d6a1363c3227089","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:12:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f1da078aad486df34cadd380b07369ca9aeeb024f33174b6d6a1363c3227089","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:12:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34951b936d3776c43a9fe08aac8ef6173640e2a0de205268de142a4a37da1cb5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:12:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f1da078aad486df34cadd380b07369ca9aeeb024f33174b6d6a1363c3227089"}
{"level":"info","ts":"2026-07-05T20:12:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34951b936d3776c43a9fe08aac8ef6173640e2a0de205268de142a4a37da1cb5"}
{"level":"debug","ts":"2026-07-05T20:12:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32d95c2a8fcd14bdab3f1c0cf60327ac29762f233e525fcf9783da2eab14d4c4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:12:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32d95c2a8fcd14bdab3f1c0cf60327ac29762f233e525fcf9783da2eab14d4c4"}
{"level":"debug","ts":"2026-07-05T20:12:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e442455723e6c69d34065414c754918099a84ad85029fbfca0e19e756d52db65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:12:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:12:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:12:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e442455723e6c69d34065414c754918099a84ad85029fbfca0e19e756d52db65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:12:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e442455723e6c69d34065414c754918099a84ad85029fbfca0e19e756d52db65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:12:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c4f99a6b97f246fabace8d56656496ea78154b654da65418215bc2db78ade4b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:12:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e442455723e6c69d34065414c754918099a84ad85029fbfca0e19e756d52db65","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:12:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e442455723e6c69d34065414c754918099a84ad85029fbfca0e19e756d52db65"}
{"level":"debug","ts":"2026-07-05T20:12:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e442455723e6c69d34065414c754918099a84ad85029fbfca0e19e756d52db65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:12:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:12:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e442455723e6c69d34065414c754918099a84ad85029fbfca0e19e756d52db65"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:12:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c4f99a6b97f246fabace8d56656496ea78154b654da65418215bc2db78ade4b"}
{"level":"info","ts":"2026-07-05T20:12:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e442455723e6c69d34065414c754918099a84ad85029fbfca0e19e756d52db65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:12:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e442455723e6c69d34065414c754918099a84ad85029fbfca0e19e756d52db65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:12:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:12:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:12:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e442455723e6c69d34065414c754918099a84ad85029fbfca0e19e756d52db65","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:12:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e442455723e6c69d34065414c754918099a84ad85029fbfca0e19e756d52db65"}
{"level":"debug","ts":"2026-07-05T20:12:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e442455723e6c69d34065414c754918099a84ad85029fbfca0e19e756d52db65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:12:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e442455723e6c69d34065414c754918099a84ad85029fbfca0e19e756d52db65","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:12:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e442455723e6c69d34065414c754918099a84ad85029fbfca0e19e756d52db65"}
{"level":"debug","ts":"2026-07-05T20:12:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e442455723e6c69d34065414c754918099a84ad85029fbfca0e19e756d52db65","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:12:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e442455723e6c69d34065414c754918099a84ad85029fbfca0e19e756d52db65"}
{"level":"debug","ts":"2026-07-05T20:12:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1f5bce244102ff39007c0930ff8c9627eb0680f0b5fe526507fe5be07e37f89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:12:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad4b9f1d7e7b1d005dfaf2c8de6522f639cbffc7106d9d98d01e9bd6d3b0473d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:12:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e442455723e6c69d34065414c754918099a84ad85029fbfca0e19e756d52db65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:12:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:12:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e442455723e6c69d34065414c754918099a84ad85029fbfca0e19e756d52db65"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:12:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1f5bce244102ff39007c0930ff8c9627eb0680f0b5fe526507fe5be07e37f89"}
{"level":"info","ts":"2026-07-05T20:12:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e442455723e6c69d34065414c754918099a84ad85029fbfca0e19e756d52db65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:12:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e442455723e6c69d34065414c754918099a84ad85029fbfca0e19e756d52db65","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:12:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad4b9f1d7e7b1d005dfaf2c8de6522f639cbffc7106d9d98d01e9bd6d3b0473d"}
{"level":"info","ts":"2026-07-05T20:12:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e442455723e6c69d34065414c754918099a84ad85029fbfca0e19e756d52db65"}
{"level":"debug","ts":"2026-07-05T20:12:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60bf86d55aad97aa58c4d83e017c17f11be69180d6390eb8b8c608325fc6d284","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:12:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:12:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:12:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60bf86d55aad97aa58c4d83e017c17f11be69180d6390eb8b8c608325fc6d284","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:12:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60bf86d55aad97aa58c4d83e017c17f11be69180d6390eb8b8c608325fc6d284","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:12:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60bf86d55aad97aa58c4d83e017c17f11be69180d6390eb8b8c608325fc6d284","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:12:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60bf86d55aad97aa58c4d83e017c17f11be69180d6390eb8b8c608325fc6d284"}
{"level":"debug","ts":"2026-07-05T20:12:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60bf86d55aad97aa58c4d83e017c17f11be69180d6390eb8b8c608325fc6d284","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:12:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60bf86d55aad97aa58c4d83e017c17f11be69180d6390eb8b8c608325fc6d284"}
{"level":"debug","ts":"2026-07-05T20:12:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60bf86d55aad97aa58c4d83e017c17f11be69180d6390eb8b8c608325fc6d284","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:12:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:12:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["60bf86d55aad97aa58c4d83e017c17f11be69180d6390eb8b8c608325fc6d284"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:12:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60bf86d55aad97aa58c4d83e017c17f11be69180d6390eb8b8c608325fc6d284","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:12:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60bf86d55aad97aa58c4d83e017c17f11be69180d6390eb8b8c608325fc6d284","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:12:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:12:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:12:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60bf86d55aad97aa58c4d83e017c17f11be69180d6390eb8b8c608325fc6d284","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:12:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa19c5e864662748183d2f5e327f681f82630dbbf21aea1b8849733119adaf82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:12:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60bf86d55aad97aa58c4d83e017c17f11be69180d6390eb8b8c608325fc6d284","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:12:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60bf86d55aad97aa58c4d83e017c17f11be69180d6390eb8b8c608325fc6d284","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:12:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4fc5fc830ab4bc920b82404287549a54e3fbb5417c0b1d1a46b99350c00245b3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:12:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60bf86d55aad97aa58c4d83e017c17f11be69180d6390eb8b8c608325fc6d284"}
{"level":"debug","ts":"2026-07-05T20:12:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60bf86d55aad97aa58c4d83e017c17f11be69180d6390eb8b8c608325fc6d284","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:12:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:12:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["60bf86d55aad97aa58c4d83e017c17f11be69180d6390eb8b8c608325fc6d284"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:12:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa19c5e864662748183d2f5e327f681f82630dbbf21aea1b8849733119adaf82"}
{"level":"info","ts":"2026-07-05T20:12:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60bf86d55aad97aa58c4d83e017c17f11be69180d6390eb8b8c608325fc6d284","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:12:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60bf86d55aad97aa58c4d83e017c17f11be69180d6390eb8b8c608325fc6d284","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:12:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4fc5fc830ab4bc920b82404287549a54e3fbb5417c0b1d1a46b99350c00245b3"}
{"level":"info","ts":"2026-07-05T20:12:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60bf86d55aad97aa58c4d83e017c17f11be69180d6390eb8b8c608325fc6d284"}
{"level":"debug","ts":"2026-07-05T20:12:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e9bce44b2ab7b915d89113bb1af51084279cf940d684956815d341c431e5019","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:12:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:12:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:12:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e9bce44b2ab7b915d89113bb1af51084279cf940d684956815d341c431e5019","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:12:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e9bce44b2ab7b915d89113bb1af51084279cf940d684956815d341c431e5019","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:12:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7b5275760ece018e34a1e424681fe412e2f88fc047a4ab85d79e8ac8035deb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:12:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e9bce44b2ab7b915d89113bb1af51084279cf940d684956815d341c431e5019","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:12:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e9bce44b2ab7b915d89113bb1af51084279cf940d684956815d341c431e5019"}
{"level":"debug","ts":"2026-07-05T20:12:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e9bce44b2ab7b915d89113bb1af51084279cf940d684956815d341c431e5019","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:12:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:12:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5e9bce44b2ab7b915d89113bb1af51084279cf940d684956815d341c431e5019"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:12:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7b5275760ece018e34a1e424681fe412e2f88fc047a4ab85d79e8ac8035deb6"}
{"level":"info","ts":"2026-07-05T20:12:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e9bce44b2ab7b915d89113bb1af51084279cf940d684956815d341c431e5019","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:12:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e9bce44b2ab7b915d89113bb1af51084279cf940d684956815d341c431e5019","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:12:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:12:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:12:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e9bce44b2ab7b915d89113bb1af51084279cf940d684956815d341c431e5019"}
{"level":"info","ts":"2026-07-05T20:12:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e9bce44b2ab7b915d89113bb1af51084279cf940d684956815d341c431e5019","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:12:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e9bce44b2ab7b915d89113bb1af51084279cf940d684956815d341c431e5019","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:12:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e9bce44b2ab7b915d89113bb1af51084279cf940d684956815d341c431e5019","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:12:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e9bce44b2ab7b915d89113bb1af51084279cf940d684956815d341c431e5019"}
{"level":"debug","ts":"2026-07-05T20:12:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e9bce44b2ab7b915d89113bb1af51084279cf940d684956815d341c431e5019","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:12:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e9bce44b2ab7b915d89113bb1af51084279cf940d684956815d341c431e5019"}
{"level":"debug","ts":"2026-07-05T20:12:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e9bce44b2ab7b915d89113bb1af51084279cf940d684956815d341c431e5019","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:12:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:12:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5e9bce44b2ab7b915d89113bb1af51084279cf940d684956815d341c431e5019"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:12:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e9bce44b2ab7b915d89113bb1af51084279cf940d684956815d341c431e5019","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:12:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e9bce44b2ab7b915d89113bb1af51084279cf940d684956815d341c431e5019","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:12:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:12:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:12:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e9bce44b2ab7b915d89113bb1af51084279cf940d684956815d341c431e5019","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:12:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e9bce44b2ab7b915d89113bb1af51084279cf940d684956815d341c431e5019","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:12:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e9bce44b2ab7b915d89113bb1af51084279cf940d684956815d341c431e5019","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:12:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e9bce44b2ab7b915d89113bb1af51084279cf940d684956815d341c431e5019"}
{"level":"debug","ts":"2026-07-05T20:12:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e9bce44b2ab7b915d89113bb1af51084279cf940d684956815d341c431e5019","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:12:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30b5dae009ee2807290974e6b4f01845b4b815352d017f4bb8c16a6b61ab8819","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:12:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e9bce44b2ab7b915d89113bb1af51084279cf940d684956815d341c431e5019"}
{"level":"debug","ts":"2026-07-05T20:12:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e9bce44b2ab7b915d89113bb1af51084279cf940d684956815d341c431e5019","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:12:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:12:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5e9bce44b2ab7b915d89113bb1af51084279cf940d684956815d341c431e5019"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:12:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e9bce44b2ab7b915d89113bb1af51084279cf940d684956815d341c431e5019","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:12:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e9bce44b2ab7b915d89113bb1af51084279cf940d684956815d341c431e5019","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:12:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30b5dae009ee2807290974e6b4f01845b4b815352d017f4bb8c16a6b61ab8819"}
{"level":"info","ts":"2026-07-05T20:12:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e9bce44b2ab7b915d89113bb1af51084279cf940d684956815d341c431e5019"}
{"level":"debug","ts":"2026-07-05T20:12:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"342dff0f76b4f8fb6fceeb077a598870ef5966f33c33b1d90917e3fbcd461718","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:12:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:12:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:12:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"342dff0f76b4f8fb6fceeb077a598870ef5966f33c33b1d90917e3fbcd461718","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:12:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"342dff0f76b4f8fb6fceeb077a598870ef5966f33c33b1d90917e3fbcd461718","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:12:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e92c5899307f917b397acd0d0f68d4515d070326a975efebcbca7f15402a7272","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:12:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"342dff0f76b4f8fb6fceeb077a598870ef5966f33c33b1d90917e3fbcd461718","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:12:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/342dff0f76b4f8fb6fceeb077a598870ef5966f33c33b1d90917e3fbcd461718"}
{"level":"debug","ts":"2026-07-05T20:12:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"342dff0f76b4f8fb6fceeb077a598870ef5966f33c33b1d90917e3fbcd461718","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:12:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:12:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["342dff0f76b4f8fb6fceeb077a598870ef5966f33c33b1d90917e3fbcd461718"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:12:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e92c5899307f917b397acd0d0f68d4515d070326a975efebcbca7f15402a7272"}
{"level":"info","ts":"2026-07-05T20:12:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"342dff0f76b4f8fb6fceeb077a598870ef5966f33c33b1d90917e3fbcd461718","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:12:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"342dff0f76b4f8fb6fceeb077a598870ef5966f33c33b1d90917e3fbcd461718","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T20:12:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T20:12:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:12:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/342dff0f76b4f8fb6fceeb077a598870ef5966f33c33b1d90917e3fbcd461718"}
{"level":"info","ts":"2026-07-05T20:12:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"342dff0f76b4f8fb6fceeb077a598870ef5966f33c33b1d90917e3fbcd461718","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:12:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"342dff0f76b4f8fb6fceeb077a598870ef5966f33c33b1d90917e3fbcd461718","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:12:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"342dff0f76b4f8fb6fceeb077a598870ef5966f33c33b1d90917e3fbcd461718","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:12:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/342dff0f76b4f8fb6fceeb077a598870ef5966f33c33b1d90917e3fbcd461718"}
{"level":"debug","ts":"2026-07-05T20:12:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"342dff0f76b4f8fb6fceeb077a598870ef5966f33c33b1d90917e3fbcd461718","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:12:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b6e12c5e8e999af4adf079025c3820257b39ee3ab0e144ad3813047dea25fd3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:12:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/342dff0f76b4f8fb6fceeb077a598870ef5966f33c33b1d90917e3fbcd461718"}
{"level":"debug","ts":"2026-07-05T20:12:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cd73c0140d8a6e5f28ca20c3c5a798343e0b654820a2ccad27e8d7c922456e0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:12:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b6e12c5e8e999af4adf079025c3820257b39ee3ab0e144ad3813047dea25fd3"}
{"level":"debug","ts":"2026-07-05T20:12:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30cda358b1b0c8ada24c7283cc6118c0d0c0ef3bd9b290c4762d4b7aae63663c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:12:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"342dff0f76b4f8fb6fceeb077a598870ef5966f33c33b1d90917e3fbcd461718","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T20:12:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T20:12:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["342dff0f76b4f8fb6fceeb077a598870ef5966f33c33b1d90917e3fbcd461718"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T20:12:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"342dff0f76b4f8fb6fceeb077a598870ef5966f33c33b1d90917e3fbcd461718","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:12:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd8a35ef86981994abed12c65ac256dfbec8ca1bb61f427abb6253693e2aa29f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T20:12:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"342dff0f76b4f8fb6fceeb077a598870ef5966f33c33b1d90917e3fbcd461718","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:12:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cd73c0140d8a6e5f28ca20c3c5a798343e0b654820a2ccad27e8d7c922456e0"}
{"level":"info","ts":"2026-07-05T20:12:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30cda358b1b0c8ada24c7283cc6118c0d0c0ef3bd9b290c4762d4b7aae63663c"}
{"level":"info","ts":"2026-07-05T20:12:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd8a35ef86981994abed12c65ac256dfbec8ca1bb61f427abb6253693e2aa29f"}
{"level":"debug","ts":"2026-07-05T20:12:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9fd73cc03ccdf994c01e09a5f385c9ac51117742b18f7326a9b058a8299eb378","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T20:12:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/342dff0f76b4f8fb6fceeb077a598870ef5966f33c33b1d90917e3fbcd461718"}
{"level":"info","ts":"2026-07-05T20:12:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9fd73cc03ccdf994c01e09a5f385c9ac51117742b18f7326a9b058a8299eb378"}
{"level":"info","ts":"2026-07-05T20:12:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"05dd7a07-c4e5-4ad8-ba6c-f7bdf6fa4db9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:35996","PortSpecifier":{"PortValue":35996}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"05dd7a07-c4e5-4ad8-ba6c-f7bdf6fa4db9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d9296f.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T20:12:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"05dd7a07-c4e5-4ad8-ba6c-f7bdf6fa4db9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:35996","PortSpecifier":{"PortValue":35996}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783282329,"nanos":538657396},"http":{"id":"05dd7a07-c4e5-4ad8-ba6c-f7bdf6fa4db9","method":"POST","headers":{":authority":"e2e-shared-a-d9296f.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:12:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"05dd7a07-c4e5-4ad8-ba6c-f7bdf6fa4db9","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-05T20:12:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"05dd7a07-c4e5-4ad8-ba6c-f7bdf6fa4db9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"194493da-c643-4106-84be-40e77e620680","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=120c6712-5da3-498d-b760-248e4ea7ef6d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe635c3faecd"]}}
{"level":"debug","ts":"2026-07-05T20:12:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"05dd7a07-c4e5-4ad8-ba6c-f7bdf6fa4db9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe635c3faecd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=120c6712-5da3-498d-b760-248e4ea7ef6d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"194493da-c643-4106-84be-40e77e620680","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4cd73c0140d8a6e5f28ca20c3c5a798343e0b654820a2ccad27e8d7c922456e0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d9296f.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:12:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"05dd7a07-c4e5-4ad8-ba6c-f7bdf6fa4db9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:12:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"05dd7a07-c4e5-4ad8-ba6c-f7bdf6fa4db9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:12:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"05dd7a07-c4e5-4ad8-ba6c-f7bdf6fa4db9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d9296f/rate-test-model-d9296f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:12:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"05dd7a07-c4e5-4ad8-ba6c-f7bdf6fa4db9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-05T20:12:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"05dd7a07-c4e5-4ad8-ba6c-f7bdf6fa4db9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T20:12:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"05dd7a07-c4e5-4ad8-ba6c-f7bdf6fa4db9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-05T20:12:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"05dd7a07-c4e5-4ad8-ba6c-f7bdf6fa4db9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T20:12:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"05dd7a07-c4e5-4ad8-ba6c-f7bdf6fa4db9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T20:12:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5fb5e94e-03b4-4798-b6fd-251d12b9974e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:54418","PortSpecifier":{"PortValue":54418}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5fb5e94e-03b4-4798-b6fd-251d12b9974e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-65fb4d.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T20:12:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5fb5e94e-03b4-4798-b6fd-251d12b9974e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:54418","PortSpecifier":{"PortValue":54418}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783282329,"nanos":590576753},"http":{"id":"5fb5e94e-03b4-4798-b6fd-251d12b9974e","method":"POST","headers":{":authority":"e2e-shared-b-65fb4d.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:12:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5fb5e94e-03b4-4798-b6fd-251d12b9974e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-05T20:12:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5fb5e94e-03b4-4798-b6fd-251d12b9974e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"194493da-c643-4106-84be-40e77e620680","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=120c6712-5da3-498d-b760-248e4ea7ef6d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe635c3faecd"]}}
{"level":"debug","ts":"2026-07-05T20:12:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5fb5e94e-03b4-4798-b6fd-251d12b9974e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe635c3faecd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=120c6712-5da3-498d-b760-248e4ea7ef6d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"194493da-c643-4106-84be-40e77e620680","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ad4b9f1d7e7b1d005dfaf2c8de6522f639cbffc7106d9d98d01e9bd6d3b0473d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-65fb4d.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:12:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5fb5e94e-03b4-4798-b6fd-251d12b9974e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:12:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5fb5e94e-03b4-4798-b6fd-251d12b9974e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:12:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5fb5e94e-03b4-4798-b6fd-251d12b9974e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-65fb4d/rate-test-model-65fb4d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:12:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5fb5e94e-03b4-4798-b6fd-251d12b9974e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-05T20:12:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5fb5e94e-03b4-4798-b6fd-251d12b9974e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T20:12:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5fb5e94e-03b4-4798-b6fd-251d12b9974e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-05T20:12:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5fb5e94e-03b4-4798-b6fd-251d12b9974e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T20:12:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5fb5e94e-03b4-4798-b6fd-251d12b9974e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T20:12:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3ef65e9f-c2da-43eb-aa16-4ece1b3c70a6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:36010","PortSpecifier":{"PortValue":36010}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3ef65e9f-c2da-43eb-aa16-4ece1b3c70a6","method":"POST","path":"/ai-tenant-e2e-shared-a-d9296f/rate-test-model-d9296f/v1/completions","host":"e2e-shared-a-d9296f.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T20:12:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3ef65e9f-c2da-43eb-aa16-4ece1b3c70a6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:36010","PortSpecifier":{"PortValue":36010}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783282329,"nanos":644820116},"http":{"id":"3ef65e9f-c2da-43eb-aa16-4ece1b3c70a6","method":"POST","headers":{":authority":"e2e-shared-a-d9296f.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d9296f/rate-test-model-d9296f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:12:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3ef65e9f-c2da-43eb-aa16-4ece1b3c70a6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1dfmxdh4ZLQQbR15K_hoCjj3T0FSeDBmZRN2GXKfeGOKgcdm4H62zPWuJQ8Wv"}
{"level":"debug","ts":"2026-07-05T20:12:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3ef65e9f-c2da-43eb-aa16-4ece1b3c70a6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d9296f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1dfmxdh4ZLQQbR15K_hoCjj3T0FSeDBmZRN2GXKfeGOKgcdm4H62zPWuJQ8Wv\"}"}
{"level":"debug","ts":"2026-07-05T20:12:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3ef65e9f-c2da-43eb-aa16-4ece1b3c70a6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d9296f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ff3731f8-63e8-4cc0-a30e-b5aae212bb4a","keyName":"e2e-rate-a-fe8539","subscription":"e2e-rate-iso-a-fe8539","tenant":"e2e-shared-a-d9296f","userId":"ff3731f8-63e8-4cc0-a30e-b5aae212bb4a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-05T20:12:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3ef65e9f-c2da-43eb-aa16-4ece1b3c70a6","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d9296f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d9296f/rate-test-model-d9296f\",\"requestedSubscription\":\"e2e-rate-iso-a-fe8539\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-05T20:12:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3ef65e9f-c2da-43eb-aa16-4ece1b3c70a6","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d9296f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d9296f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fe8539","namespace":"ai-tenant-e2e-shared-a-d9296f","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-05T20:12:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3ef65e9f-c2da-43eb-aa16-4ece1b3c70a6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:12:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ef65e9f-c2da-43eb-aa16-4ece1b3c70a6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:12:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ef65e9f-c2da-43eb-aa16-4ece1b3c70a6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:12:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ef65e9f-c2da-43eb-aa16-4ece1b3c70a6","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:12:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ef65e9f-c2da-43eb-aa16-4ece1b3c70a6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d9296f/rate-test-model-d9296f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:12:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3ef65e9f-c2da-43eb-aa16-4ece1b3c70a6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T20:12:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3ef65e9f-c2da-43eb-aa16-4ece1b3c70a6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-05T20:12:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3ef65e9f-c2da-43eb-aa16-4ece1b3c70a6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-fe8539"}
{"level":"debug","ts":"2026-07-05T20:12:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3ef65e9f-c2da-43eb-aa16-4ece1b3c70a6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ff3731f8-63e8-4cc0-a30e-b5aae212bb4a","keyName":"e2e-rate-a-fe8539","selected_subscription":"e2e-rate-iso-a-fe8539","selected_subscription_key":"ai-tenant-e2e-shared-a-d9296f/e2e-rate-iso-a-fe8539@ai-tenant-e2e-shared-a-d9296f/rate-test-model-d9296f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d9296f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fe8539","namespace":"ai-tenant-e2e-shared-a-d9296f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-05T20:12:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3ef65e9f-c2da-43eb-aa16-4ece1b3c70a6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T20:12:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3ef65e9f-c2da-43eb-aa16-4ece1b3c70a6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T20:12:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0e753ba1-0dc0-415e-b98b-bf2f9dc30c03","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:36012","PortSpecifier":{"PortValue":36012}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0e753ba1-0dc0-415e-b98b-bf2f9dc30c03","method":"POST","path":"/ai-tenant-e2e-shared-a-d9296f/rate-test-model-d9296f/v1/completions","host":"e2e-shared-a-d9296f.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T20:12:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0e753ba1-0dc0-415e-b98b-bf2f9dc30c03","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:36012","PortSpecifier":{"PortValue":36012}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783282330,"nanos":701541078},"http":{"id":"0e753ba1-0dc0-415e-b98b-bf2f9dc30c03","method":"POST","headers":{":authority":"e2e-shared-a-d9296f.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d9296f/rate-test-model-d9296f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:12:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0e753ba1-0dc0-415e-b98b-bf2f9dc30c03","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1dfmxdh4ZLQQbR15K_hoCjj3T0FSeDBmZRN2GXKfeGOKgcdm4H62zPWuJQ8Wv"}
{"level":"debug","ts":"2026-07-05T20:12:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0e753ba1-0dc0-415e-b98b-bf2f9dc30c03","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d9296f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1dfmxdh4ZLQQbR15K_hoCjj3T0FSeDBmZRN2GXKfeGOKgcdm4H62zPWuJQ8Wv\"}"}
{"level":"debug","ts":"2026-07-05T20:12:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0e753ba1-0dc0-415e-b98b-bf2f9dc30c03","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d9296f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ff3731f8-63e8-4cc0-a30e-b5aae212bb4a","keyName":"e2e-rate-a-fe8539","subscription":"e2e-rate-iso-a-fe8539","tenant":"e2e-shared-a-d9296f","userId":"ff3731f8-63e8-4cc0-a30e-b5aae212bb4a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-05T20:12:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0e753ba1-0dc0-415e-b98b-bf2f9dc30c03","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d9296f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d9296f/rate-test-model-d9296f\",\"requestedSubscription\":\"e2e-rate-iso-a-fe8539\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-05T20:12:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0e753ba1-0dc0-415e-b98b-bf2f9dc30c03","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d9296f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d9296f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fe8539","namespace":"ai-tenant-e2e-shared-a-d9296f","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-05T20:12:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0e753ba1-0dc0-415e-b98b-bf2f9dc30c03","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:12:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e753ba1-0dc0-415e-b98b-bf2f9dc30c03","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:12:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e753ba1-0dc0-415e-b98b-bf2f9dc30c03","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:12:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e753ba1-0dc0-415e-b98b-bf2f9dc30c03","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:12:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e753ba1-0dc0-415e-b98b-bf2f9dc30c03","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d9296f/rate-test-model-d9296f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:12:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0e753ba1-0dc0-415e-b98b-bf2f9dc30c03","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T20:12:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0e753ba1-0dc0-415e-b98b-bf2f9dc30c03","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-fe8539"}
{"level":"debug","ts":"2026-07-05T20:12:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0e753ba1-0dc0-415e-b98b-bf2f9dc30c03","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-05T20:12:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0e753ba1-0dc0-415e-b98b-bf2f9dc30c03","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ff3731f8-63e8-4cc0-a30e-b5aae212bb4a","keyName":"e2e-rate-a-fe8539","selected_subscription":"e2e-rate-iso-a-fe8539","selected_subscription_key":"ai-tenant-e2e-shared-a-d9296f/e2e-rate-iso-a-fe8539@ai-tenant-e2e-shared-a-d9296f/rate-test-model-d9296f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d9296f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fe8539","namespace":"ai-tenant-e2e-shared-a-d9296f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-05T20:12:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0e753ba1-0dc0-415e-b98b-bf2f9dc30c03","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T20:12:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0e753ba1-0dc0-415e-b98b-bf2f9dc30c03","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T20:12:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0ea8ab4a-2776-4678-9253-546dae2a9d25","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:36022","PortSpecifier":{"PortValue":36022}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0ea8ab4a-2776-4678-9253-546dae2a9d25","method":"POST","path":"/ai-tenant-e2e-shared-a-d9296f/rate-test-model-d9296f/v1/completions","host":"e2e-shared-a-d9296f.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T20:12:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0ea8ab4a-2776-4678-9253-546dae2a9d25","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:36022","PortSpecifier":{"PortValue":36022}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783282331,"nanos":736663366},"http":{"id":"0ea8ab4a-2776-4678-9253-546dae2a9d25","method":"POST","headers":{":authority":"e2e-shared-a-d9296f.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d9296f/rate-test-model-d9296f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:12:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0ea8ab4a-2776-4678-9253-546dae2a9d25","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1dfmxdh4ZLQQbR15K_hoCjj3T0FSeDBmZRN2GXKfeGOKgcdm4H62zPWuJQ8Wv"}
{"level":"debug","ts":"2026-07-05T20:12:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0ea8ab4a-2776-4678-9253-546dae2a9d25","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d9296f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1dfmxdh4ZLQQbR15K_hoCjj3T0FSeDBmZRN2GXKfeGOKgcdm4H62zPWuJQ8Wv\"}"}
{"level":"debug","ts":"2026-07-05T20:12:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0ea8ab4a-2776-4678-9253-546dae2a9d25","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d9296f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ff3731f8-63e8-4cc0-a30e-b5aae212bb4a","keyName":"e2e-rate-a-fe8539","subscription":"e2e-rate-iso-a-fe8539","tenant":"e2e-shared-a-d9296f","userId":"ff3731f8-63e8-4cc0-a30e-b5aae212bb4a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-05T20:12:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0ea8ab4a-2776-4678-9253-546dae2a9d25","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d9296f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d9296f/rate-test-model-d9296f\",\"requestedSubscription\":\"e2e-rate-iso-a-fe8539\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-05T20:12:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0ea8ab4a-2776-4678-9253-546dae2a9d25","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d9296f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d9296f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fe8539","namespace":"ai-tenant-e2e-shared-a-d9296f","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-05T20:12:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0ea8ab4a-2776-4678-9253-546dae2a9d25","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:12:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0ea8ab4a-2776-4678-9253-546dae2a9d25","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:12:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0ea8ab4a-2776-4678-9253-546dae2a9d25","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:12:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0ea8ab4a-2776-4678-9253-546dae2a9d25","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:12:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0ea8ab4a-2776-4678-9253-546dae2a9d25","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d9296f/rate-test-model-d9296f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:12:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0ea8ab4a-2776-4678-9253-546dae2a9d25","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-fe8539"}
{"level":"debug","ts":"2026-07-05T20:12:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0ea8ab4a-2776-4678-9253-546dae2a9d25","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T20:12:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0ea8ab4a-2776-4678-9253-546dae2a9d25","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-05T20:12:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0ea8ab4a-2776-4678-9253-546dae2a9d25","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ff3731f8-63e8-4cc0-a30e-b5aae212bb4a","keyName":"e2e-rate-a-fe8539","selected_subscription":"e2e-rate-iso-a-fe8539","selected_subscription_key":"ai-tenant-e2e-shared-a-d9296f/e2e-rate-iso-a-fe8539@ai-tenant-e2e-shared-a-d9296f/rate-test-model-d9296f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d9296f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fe8539","namespace":"ai-tenant-e2e-shared-a-d9296f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-05T20:12:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0ea8ab4a-2776-4678-9253-546dae2a9d25","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T20:12:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0ea8ab4a-2776-4678-9253-546dae2a9d25","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T20:12:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2ec72bb4-7566-419e-ac48-007104c0d5b9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:44712","PortSpecifier":{"PortValue":44712}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2ec72bb4-7566-419e-ac48-007104c0d5b9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d9296f.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T20:12:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2ec72bb4-7566-419e-ac48-007104c0d5b9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:44712","PortSpecifier":{"PortValue":44712}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783282338,"nanos":362832033},"http":{"id":"2ec72bb4-7566-419e-ac48-007104c0d5b9","method":"POST","headers":{":authority":"e2e-shared-a-d9296f.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:12:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2ec72bb4-7566-419e-ac48-007104c0d5b9","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-05T20:12:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2ec72bb4-7566-419e-ac48-007104c0d5b9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"194493da-c643-4106-84be-40e77e620680","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=120c6712-5da3-498d-b760-248e4ea7ef6d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe635c3faecd"]}}
{"level":"debug","ts":"2026-07-05T20:12:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2ec72bb4-7566-419e-ac48-007104c0d5b9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe635c3faecd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=120c6712-5da3-498d-b760-248e4ea7ef6d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"194493da-c643-4106-84be-40e77e620680","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4cd73c0140d8a6e5f28ca20c3c5a798343e0b654820a2ccad27e8d7c922456e0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d9296f.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:12:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ec72bb4-7566-419e-ac48-007104c0d5b9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:12:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ec72bb4-7566-419e-ac48-007104c0d5b9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:12:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ec72bb4-7566-419e-ac48-007104c0d5b9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d9296f/rate-test-model-d9296f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:12:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2ec72bb4-7566-419e-ac48-007104c0d5b9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-05T20:12:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2ec72bb4-7566-419e-ac48-007104c0d5b9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T20:12:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2ec72bb4-7566-419e-ac48-007104c0d5b9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-05T20:12:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2ec72bb4-7566-419e-ac48-007104c0d5b9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T20:12:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2ec72bb4-7566-419e-ac48-007104c0d5b9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T20:12:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"57159da7-7005-4e24-989b-879b49806108","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:60486","PortSpecifier":{"PortValue":60486}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"57159da7-7005-4e24-989b-879b49806108","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-65fb4d.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T20:12:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"57159da7-7005-4e24-989b-879b49806108","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:60486","PortSpecifier":{"PortValue":60486}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783282338,"nanos":427357770},"http":{"id":"57159da7-7005-4e24-989b-879b49806108","method":"POST","headers":{":authority":"e2e-shared-b-65fb4d.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:12:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"57159da7-7005-4e24-989b-879b49806108","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-05T20:12:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"57159da7-7005-4e24-989b-879b49806108","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"194493da-c643-4106-84be-40e77e620680","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=120c6712-5da3-498d-b760-248e4ea7ef6d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe635c3faecd"]}}
{"level":"debug","ts":"2026-07-05T20:12:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"57159da7-7005-4e24-989b-879b49806108","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe635c3faecd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=120c6712-5da3-498d-b760-248e4ea7ef6d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"194493da-c643-4106-84be-40e77e620680","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ad4b9f1d7e7b1d005dfaf2c8de6522f639cbffc7106d9d98d01e9bd6d3b0473d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-65fb4d.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:12:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57159da7-7005-4e24-989b-879b49806108","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:12:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57159da7-7005-4e24-989b-879b49806108","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:12:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57159da7-7005-4e24-989b-879b49806108","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-65fb4d/rate-test-model-65fb4d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:12:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"57159da7-7005-4e24-989b-879b49806108","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-05T20:12:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57159da7-7005-4e24-989b-879b49806108","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T20:12:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57159da7-7005-4e24-989b-879b49806108","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-05T20:12:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"57159da7-7005-4e24-989b-879b49806108","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T20:12:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"57159da7-7005-4e24-989b-879b49806108","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T20:12:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4b2255bb-1f31-4798-b078-e7cc6064af03","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:44720","PortSpecifier":{"PortValue":44720}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4b2255bb-1f31-4798-b078-e7cc6064af03","method":"POST","path":"/ai-tenant-e2e-shared-a-d9296f/rate-test-model-d9296f/v1/completions","host":"e2e-shared-a-d9296f.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T20:12:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4b2255bb-1f31-4798-b078-e7cc6064af03","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:44720","PortSpecifier":{"PortValue":44720}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783282338,"nanos":482715107},"http":{"id":"4b2255bb-1f31-4798-b078-e7cc6064af03","method":"POST","headers":{":authority":"e2e-shared-a-d9296f.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d9296f/rate-test-model-d9296f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:12:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4b2255bb-1f31-4798-b078-e7cc6064af03","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1btXULvEgG4bRkJAV_2QTuzUaji247a4trcimgRPjEq2HTL8w5aKa6E4M2H31"}
{"level":"debug","ts":"2026-07-05T20:12:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4b2255bb-1f31-4798-b078-e7cc6064af03","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d9296f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1btXULvEgG4bRkJAV_2QTuzUaji247a4trcimgRPjEq2HTL8w5aKa6E4M2H31\"}"}
{"level":"debug","ts":"2026-07-05T20:12:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4b2255bb-1f31-4798-b078-e7cc6064af03","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d9296f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"72246add-d1ec-4583-bf1f-74b2e7e5cbdb","keyName":"e2e-rate-a-451c7a","subscription":"e2e-rate-iso-a-451c7a","tenant":"e2e-shared-a-d9296f","userId":"72246add-d1ec-4583-bf1f-74b2e7e5cbdb","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-05T20:12:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4b2255bb-1f31-4798-b078-e7cc6064af03","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d9296f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d9296f/rate-test-model-d9296f\",\"requestedSubscription\":\"e2e-rate-iso-a-451c7a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-05T20:12:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4b2255bb-1f31-4798-b078-e7cc6064af03","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d9296f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d9296f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-451c7a","namespace":"ai-tenant-e2e-shared-a-d9296f","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-05T20:12:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4b2255bb-1f31-4798-b078-e7cc6064af03","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:12:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4b2255bb-1f31-4798-b078-e7cc6064af03","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:12:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4b2255bb-1f31-4798-b078-e7cc6064af03","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:12:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4b2255bb-1f31-4798-b078-e7cc6064af03","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:12:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4b2255bb-1f31-4798-b078-e7cc6064af03","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d9296f/rate-test-model-d9296f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:12:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4b2255bb-1f31-4798-b078-e7cc6064af03","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T20:12:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4b2255bb-1f31-4798-b078-e7cc6064af03","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-451c7a"}
{"level":"debug","ts":"2026-07-05T20:12:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4b2255bb-1f31-4798-b078-e7cc6064af03","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-05T20:12:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4b2255bb-1f31-4798-b078-e7cc6064af03","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"72246add-d1ec-4583-bf1f-74b2e7e5cbdb","keyName":"e2e-rate-a-451c7a","selected_subscription":"e2e-rate-iso-a-451c7a","selected_subscription_key":"ai-tenant-e2e-shared-a-d9296f/e2e-rate-iso-a-451c7a@ai-tenant-e2e-shared-a-d9296f/rate-test-model-d9296f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d9296f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-451c7a","namespace":"ai-tenant-e2e-shared-a-d9296f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-05T20:12:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4b2255bb-1f31-4798-b078-e7cc6064af03","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T20:12:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4b2255bb-1f31-4798-b078-e7cc6064af03","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T20:12:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0322ea41-1f95-4046-968a-b0e8d6955e4c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:44736","PortSpecifier":{"PortValue":44736}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0322ea41-1f95-4046-968a-b0e8d6955e4c","method":"POST","path":"/ai-tenant-e2e-shared-a-d9296f/rate-test-model-d9296f/v1/completions","host":"e2e-shared-a-d9296f.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T20:12:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0322ea41-1f95-4046-968a-b0e8d6955e4c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:44736","PortSpecifier":{"PortValue":44736}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783282339,"nanos":520263944},"http":{"id":"0322ea41-1f95-4046-968a-b0e8d6955e4c","method":"POST","headers":{":authority":"e2e-shared-a-d9296f.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d9296f/rate-test-model-d9296f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:12:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0322ea41-1f95-4046-968a-b0e8d6955e4c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1btXULvEgG4bRkJAV_2QTuzUaji247a4trcimgRPjEq2HTL8w5aKa6E4M2H31"}
{"level":"debug","ts":"2026-07-05T20:12:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0322ea41-1f95-4046-968a-b0e8d6955e4c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d9296f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1btXULvEgG4bRkJAV_2QTuzUaji247a4trcimgRPjEq2HTL8w5aKa6E4M2H31\"}"}
{"level":"debug","ts":"2026-07-05T20:12:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0322ea41-1f95-4046-968a-b0e8d6955e4c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d9296f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"72246add-d1ec-4583-bf1f-74b2e7e5cbdb","keyName":"e2e-rate-a-451c7a","subscription":"e2e-rate-iso-a-451c7a","tenant":"e2e-shared-a-d9296f","userId":"72246add-d1ec-4583-bf1f-74b2e7e5cbdb","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-05T20:12:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0322ea41-1f95-4046-968a-b0e8d6955e4c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d9296f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d9296f/rate-test-model-d9296f\",\"requestedSubscription\":\"e2e-rate-iso-a-451c7a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-05T20:12:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0322ea41-1f95-4046-968a-b0e8d6955e4c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d9296f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d9296f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-451c7a","namespace":"ai-tenant-e2e-shared-a-d9296f","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-05T20:12:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0322ea41-1f95-4046-968a-b0e8d6955e4c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:12:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0322ea41-1f95-4046-968a-b0e8d6955e4c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:12:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0322ea41-1f95-4046-968a-b0e8d6955e4c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:12:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0322ea41-1f95-4046-968a-b0e8d6955e4c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:12:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0322ea41-1f95-4046-968a-b0e8d6955e4c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d9296f/rate-test-model-d9296f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:12:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0322ea41-1f95-4046-968a-b0e8d6955e4c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T20:12:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0322ea41-1f95-4046-968a-b0e8d6955e4c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-451c7a"}
{"level":"debug","ts":"2026-07-05T20:12:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0322ea41-1f95-4046-968a-b0e8d6955e4c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-05T20:12:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0322ea41-1f95-4046-968a-b0e8d6955e4c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"72246add-d1ec-4583-bf1f-74b2e7e5cbdb","keyName":"e2e-rate-a-451c7a","selected_subscription":"e2e-rate-iso-a-451c7a","selected_subscription_key":"ai-tenant-e2e-shared-a-d9296f/e2e-rate-iso-a-451c7a@ai-tenant-e2e-shared-a-d9296f/rate-test-model-d9296f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d9296f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-451c7a","namespace":"ai-tenant-e2e-shared-a-d9296f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-05T20:12:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0322ea41-1f95-4046-968a-b0e8d6955e4c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T20:12:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0322ea41-1f95-4046-968a-b0e8d6955e4c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T20:12:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"59ecdcc5-cabf-4d65-a59a-2af62661af04","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:44738","PortSpecifier":{"PortValue":44738}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"59ecdcc5-cabf-4d65-a59a-2af62661af04","method":"POST","path":"/ai-tenant-e2e-shared-a-d9296f/rate-test-model-d9296f/v1/completions","host":"e2e-shared-a-d9296f.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T20:12:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"59ecdcc5-cabf-4d65-a59a-2af62661af04","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:44738","PortSpecifier":{"PortValue":44738}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783282340,"nanos":557896022},"http":{"id":"59ecdcc5-cabf-4d65-a59a-2af62661af04","method":"POST","headers":{":authority":"e2e-shared-a-d9296f.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d9296f/rate-test-model-d9296f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:12:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"59ecdcc5-cabf-4d65-a59a-2af62661af04","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1btXULvEgG4bRkJAV_2QTuzUaji247a4trcimgRPjEq2HTL8w5aKa6E4M2H31"}
{"level":"debug","ts":"2026-07-05T20:12:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"59ecdcc5-cabf-4d65-a59a-2af62661af04","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d9296f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1btXULvEgG4bRkJAV_2QTuzUaji247a4trcimgRPjEq2HTL8w5aKa6E4M2H31\"}"}
{"level":"debug","ts":"2026-07-05T20:12:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"59ecdcc5-cabf-4d65-a59a-2af62661af04","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d9296f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"72246add-d1ec-4583-bf1f-74b2e7e5cbdb","keyName":"e2e-rate-a-451c7a","subscription":"e2e-rate-iso-a-451c7a","tenant":"e2e-shared-a-d9296f","userId":"72246add-d1ec-4583-bf1f-74b2e7e5cbdb","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-05T20:12:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"59ecdcc5-cabf-4d65-a59a-2af62661af04","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d9296f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d9296f/rate-test-model-d9296f\",\"requestedSubscription\":\"e2e-rate-iso-a-451c7a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-05T20:12:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"59ecdcc5-cabf-4d65-a59a-2af62661af04","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d9296f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d9296f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-451c7a","namespace":"ai-tenant-e2e-shared-a-d9296f","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-05T20:12:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"59ecdcc5-cabf-4d65-a59a-2af62661af04","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:12:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"59ecdcc5-cabf-4d65-a59a-2af62661af04","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:12:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"59ecdcc5-cabf-4d65-a59a-2af62661af04","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:12:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"59ecdcc5-cabf-4d65-a59a-2af62661af04","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d9296f/rate-test-model-d9296f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:12:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"59ecdcc5-cabf-4d65-a59a-2af62661af04","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:12:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"59ecdcc5-cabf-4d65-a59a-2af62661af04","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-451c7a"}
{"level":"debug","ts":"2026-07-05T20:12:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"59ecdcc5-cabf-4d65-a59a-2af62661af04","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T20:12:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"59ecdcc5-cabf-4d65-a59a-2af62661af04","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-05T20:12:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"59ecdcc5-cabf-4d65-a59a-2af62661af04","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"72246add-d1ec-4583-bf1f-74b2e7e5cbdb","keyName":"e2e-rate-a-451c7a","selected_subscription":"e2e-rate-iso-a-451c7a","selected_subscription_key":"ai-tenant-e2e-shared-a-d9296f/e2e-rate-iso-a-451c7a@ai-tenant-e2e-shared-a-d9296f/rate-test-model-d9296f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d9296f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-451c7a","namespace":"ai-tenant-e2e-shared-a-d9296f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-05T20:12:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"59ecdcc5-cabf-4d65-a59a-2af62661af04","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T20:12:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"59ecdcc5-cabf-4d65-a59a-2af62661af04","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T20:12:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7c10654f-829a-43bf-8940-ab34fdb71066","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:44752","PortSpecifier":{"PortValue":44752}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7c10654f-829a-43bf-8940-ab34fdb71066","method":"POST","path":"/ai-tenant-e2e-shared-a-d9296f/rate-test-model-d9296f/v1/completions","host":"e2e-shared-a-d9296f.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T20:12:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7c10654f-829a-43bf-8940-ab34fdb71066","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:44752","PortSpecifier":{"PortValue":44752}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783282341,"nanos":592602996},"http":{"id":"7c10654f-829a-43bf-8940-ab34fdb71066","method":"POST","headers":{":authority":"e2e-shared-a-d9296f.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d9296f/rate-test-model-d9296f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:12:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7c10654f-829a-43bf-8940-ab34fdb71066","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1btXULvEgG4bRkJAV_2QTuzUaji247a4trcimgRPjEq2HTL8w5aKa6E4M2H31"}
{"level":"debug","ts":"2026-07-05T20:12:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7c10654f-829a-43bf-8940-ab34fdb71066","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d9296f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1btXULvEgG4bRkJAV_2QTuzUaji247a4trcimgRPjEq2HTL8w5aKa6E4M2H31\"}"}
{"level":"debug","ts":"2026-07-05T20:12:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7c10654f-829a-43bf-8940-ab34fdb71066","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d9296f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"72246add-d1ec-4583-bf1f-74b2e7e5cbdb","keyName":"e2e-rate-a-451c7a","subscription":"e2e-rate-iso-a-451c7a","tenant":"e2e-shared-a-d9296f","userId":"72246add-d1ec-4583-bf1f-74b2e7e5cbdb","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-05T20:12:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7c10654f-829a-43bf-8940-ab34fdb71066","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d9296f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d9296f/rate-test-model-d9296f\",\"requestedSubscription\":\"e2e-rate-iso-a-451c7a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-05T20:12:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7c10654f-829a-43bf-8940-ab34fdb71066","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d9296f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d9296f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-451c7a","namespace":"ai-tenant-e2e-shared-a-d9296f","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-05T20:12:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7c10654f-829a-43bf-8940-ab34fdb71066","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:12:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c10654f-829a-43bf-8940-ab34fdb71066","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:12:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c10654f-829a-43bf-8940-ab34fdb71066","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:12:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c10654f-829a-43bf-8940-ab34fdb71066","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:12:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c10654f-829a-43bf-8940-ab34fdb71066","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d9296f/rate-test-model-d9296f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:12:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7c10654f-829a-43bf-8940-ab34fdb71066","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T20:12:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7c10654f-829a-43bf-8940-ab34fdb71066","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-451c7a"}
{"level":"debug","ts":"2026-07-05T20:12:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7c10654f-829a-43bf-8940-ab34fdb71066","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-05T20:12:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7c10654f-829a-43bf-8940-ab34fdb71066","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"72246add-d1ec-4583-bf1f-74b2e7e5cbdb","keyName":"e2e-rate-a-451c7a","selected_subscription":"e2e-rate-iso-a-451c7a","selected_subscription_key":"ai-tenant-e2e-shared-a-d9296f/e2e-rate-iso-a-451c7a@ai-tenant-e2e-shared-a-d9296f/rate-test-model-d9296f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d9296f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-451c7a","namespace":"ai-tenant-e2e-shared-a-d9296f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-05T20:12:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7c10654f-829a-43bf-8940-ab34fdb71066","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T20:12:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7c10654f-829a-43bf-8940-ab34fdb71066","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T20:12:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f6621d43-7c2f-4a66-b043-568691a69174","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:44764","PortSpecifier":{"PortValue":44764}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f6621d43-7c2f-4a66-b043-568691a69174","method":"POST","path":"/ai-tenant-e2e-shared-a-d9296f/rate-test-model-d9296f/v1/completions","host":"e2e-shared-a-d9296f.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T20:12:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f6621d43-7c2f-4a66-b043-568691a69174","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:44764","PortSpecifier":{"PortValue":44764}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783282342,"nanos":636363922},"http":{"id":"f6621d43-7c2f-4a66-b043-568691a69174","method":"POST","headers":{":authority":"e2e-shared-a-d9296f.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d9296f/rate-test-model-d9296f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:12:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f6621d43-7c2f-4a66-b043-568691a69174","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1btXULvEgG4bRkJAV_2QTuzUaji247a4trcimgRPjEq2HTL8w5aKa6E4M2H31"}
{"level":"debug","ts":"2026-07-05T20:12:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f6621d43-7c2f-4a66-b043-568691a69174","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d9296f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1btXULvEgG4bRkJAV_2QTuzUaji247a4trcimgRPjEq2HTL8w5aKa6E4M2H31\"}"}
{"level":"debug","ts":"2026-07-05T20:12:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f6621d43-7c2f-4a66-b043-568691a69174","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d9296f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"72246add-d1ec-4583-bf1f-74b2e7e5cbdb","keyName":"e2e-rate-a-451c7a","subscription":"e2e-rate-iso-a-451c7a","tenant":"e2e-shared-a-d9296f","userId":"72246add-d1ec-4583-bf1f-74b2e7e5cbdb","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-05T20:12:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f6621d43-7c2f-4a66-b043-568691a69174","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d9296f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d9296f/rate-test-model-d9296f\",\"requestedSubscription\":\"e2e-rate-iso-a-451c7a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-05T20:12:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f6621d43-7c2f-4a66-b043-568691a69174","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d9296f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d9296f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-451c7a","namespace":"ai-tenant-e2e-shared-a-d9296f","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-05T20:12:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f6621d43-7c2f-4a66-b043-568691a69174","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:12:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f6621d43-7c2f-4a66-b043-568691a69174","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:12:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f6621d43-7c2f-4a66-b043-568691a69174","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:12:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f6621d43-7c2f-4a66-b043-568691a69174","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d9296f/rate-test-model-d9296f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:12:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f6621d43-7c2f-4a66-b043-568691a69174","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:12:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f6621d43-7c2f-4a66-b043-568691a69174","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T20:12:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f6621d43-7c2f-4a66-b043-568691a69174","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-451c7a"}
{"level":"debug","ts":"2026-07-05T20:12:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f6621d43-7c2f-4a66-b043-568691a69174","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-05T20:12:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f6621d43-7c2f-4a66-b043-568691a69174","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"72246add-d1ec-4583-bf1f-74b2e7e5cbdb","keyName":"e2e-rate-a-451c7a","selected_subscription":"e2e-rate-iso-a-451c7a","selected_subscription_key":"ai-tenant-e2e-shared-a-d9296f/e2e-rate-iso-a-451c7a@ai-tenant-e2e-shared-a-d9296f/rate-test-model-d9296f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d9296f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-451c7a","namespace":"ai-tenant-e2e-shared-a-d9296f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-05T20:12:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f6621d43-7c2f-4a66-b043-568691a69174","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T20:12:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f6621d43-7c2f-4a66-b043-568691a69174","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T20:12:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"29cb885d-5bbe-4a79-ade2-cb40f231dc22","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:44778","PortSpecifier":{"PortValue":44778}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"29cb885d-5bbe-4a79-ade2-cb40f231dc22","method":"POST","path":"/ai-tenant-e2e-shared-a-d9296f/rate-test-model-d9296f/v1/completions","host":"e2e-shared-a-d9296f.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T20:12:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"29cb885d-5bbe-4a79-ade2-cb40f231dc22","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:44778","PortSpecifier":{"PortValue":44778}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783282343,"nanos":675181799},"http":{"id":"29cb885d-5bbe-4a79-ade2-cb40f231dc22","method":"POST","headers":{":authority":"e2e-shared-a-d9296f.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d9296f/rate-test-model-d9296f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:12:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"29cb885d-5bbe-4a79-ade2-cb40f231dc22","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1btXULvEgG4bRkJAV_2QTuzUaji247a4trcimgRPjEq2HTL8w5aKa6E4M2H31"}
{"level":"debug","ts":"2026-07-05T20:12:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"29cb885d-5bbe-4a79-ade2-cb40f231dc22","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d9296f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1btXULvEgG4bRkJAV_2QTuzUaji247a4trcimgRPjEq2HTL8w5aKa6E4M2H31\"}"}
{"level":"debug","ts":"2026-07-05T20:12:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"29cb885d-5bbe-4a79-ade2-cb40f231dc22","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d9296f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"72246add-d1ec-4583-bf1f-74b2e7e5cbdb","keyName":"e2e-rate-a-451c7a","subscription":"e2e-rate-iso-a-451c7a","tenant":"e2e-shared-a-d9296f","userId":"72246add-d1ec-4583-bf1f-74b2e7e5cbdb","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-05T20:12:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"29cb885d-5bbe-4a79-ade2-cb40f231dc22","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d9296f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d9296f/rate-test-model-d9296f\",\"requestedSubscription\":\"e2e-rate-iso-a-451c7a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-05T20:12:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"29cb885d-5bbe-4a79-ade2-cb40f231dc22","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d9296f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d9296f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-451c7a","namespace":"ai-tenant-e2e-shared-a-d9296f","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-05T20:12:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"29cb885d-5bbe-4a79-ade2-cb40f231dc22","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:12:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"29cb885d-5bbe-4a79-ade2-cb40f231dc22","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:12:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"29cb885d-5bbe-4a79-ade2-cb40f231dc22","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:12:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"29cb885d-5bbe-4a79-ade2-cb40f231dc22","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d9296f/rate-test-model-d9296f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:12:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"29cb885d-5bbe-4a79-ade2-cb40f231dc22","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:12:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"29cb885d-5bbe-4a79-ade2-cb40f231dc22","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T20:12:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"29cb885d-5bbe-4a79-ade2-cb40f231dc22","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-05T20:12:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"29cb885d-5bbe-4a79-ade2-cb40f231dc22","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-451c7a"}
{"level":"debug","ts":"2026-07-05T20:12:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"29cb885d-5bbe-4a79-ade2-cb40f231dc22","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"72246add-d1ec-4583-bf1f-74b2e7e5cbdb","keyName":"e2e-rate-a-451c7a","selected_subscription":"e2e-rate-iso-a-451c7a","selected_subscription_key":"ai-tenant-e2e-shared-a-d9296f/e2e-rate-iso-a-451c7a@ai-tenant-e2e-shared-a-d9296f/rate-test-model-d9296f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d9296f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-451c7a","namespace":"ai-tenant-e2e-shared-a-d9296f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-05T20:12:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"29cb885d-5bbe-4a79-ade2-cb40f231dc22","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T20:12:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"29cb885d-5bbe-4a79-ade2-cb40f231dc22","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T20:12:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cdb8f6ae-0660-42d8-890d-655d257fa527","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:44784","PortSpecifier":{"PortValue":44784}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cdb8f6ae-0660-42d8-890d-655d257fa527","method":"POST","path":"/ai-tenant-e2e-shared-a-d9296f/rate-test-model-d9296f/v1/completions","host":"e2e-shared-a-d9296f.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T20:12:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cdb8f6ae-0660-42d8-890d-655d257fa527","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:44784","PortSpecifier":{"PortValue":44784}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783282344,"nanos":710344816},"http":{"id":"cdb8f6ae-0660-42d8-890d-655d257fa527","method":"POST","headers":{":authority":"e2e-shared-a-d9296f.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d9296f/rate-test-model-d9296f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:12:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cdb8f6ae-0660-42d8-890d-655d257fa527","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1btXULvEgG4bRkJAV_2QTuzUaji247a4trcimgRPjEq2HTL8w5aKa6E4M2H31"}
{"level":"debug","ts":"2026-07-05T20:12:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cdb8f6ae-0660-42d8-890d-655d257fa527","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d9296f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1btXULvEgG4bRkJAV_2QTuzUaji247a4trcimgRPjEq2HTL8w5aKa6E4M2H31\"}"}
{"level":"debug","ts":"2026-07-05T20:12:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cdb8f6ae-0660-42d8-890d-655d257fa527","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d9296f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"72246add-d1ec-4583-bf1f-74b2e7e5cbdb","keyName":"e2e-rate-a-451c7a","subscription":"e2e-rate-iso-a-451c7a","tenant":"e2e-shared-a-d9296f","userId":"72246add-d1ec-4583-bf1f-74b2e7e5cbdb","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-05T20:12:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cdb8f6ae-0660-42d8-890d-655d257fa527","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d9296f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d9296f/rate-test-model-d9296f\",\"requestedSubscription\":\"e2e-rate-iso-a-451c7a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-05T20:12:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cdb8f6ae-0660-42d8-890d-655d257fa527","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d9296f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d9296f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-451c7a","namespace":"ai-tenant-e2e-shared-a-d9296f","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-05T20:12:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cdb8f6ae-0660-42d8-890d-655d257fa527","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:12:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cdb8f6ae-0660-42d8-890d-655d257fa527","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:12:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cdb8f6ae-0660-42d8-890d-655d257fa527","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:12:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cdb8f6ae-0660-42d8-890d-655d257fa527","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d9296f/rate-test-model-d9296f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:12:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cdb8f6ae-0660-42d8-890d-655d257fa527","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:12:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cdb8f6ae-0660-42d8-890d-655d257fa527","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-05T20:12:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cdb8f6ae-0660-42d8-890d-655d257fa527","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T20:12:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cdb8f6ae-0660-42d8-890d-655d257fa527","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-451c7a"}
{"level":"debug","ts":"2026-07-05T20:12:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cdb8f6ae-0660-42d8-890d-655d257fa527","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"72246add-d1ec-4583-bf1f-74b2e7e5cbdb","keyName":"e2e-rate-a-451c7a","selected_subscription":"e2e-rate-iso-a-451c7a","selected_subscription_key":"ai-tenant-e2e-shared-a-d9296f/e2e-rate-iso-a-451c7a@ai-tenant-e2e-shared-a-d9296f/rate-test-model-d9296f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d9296f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-451c7a","namespace":"ai-tenant-e2e-shared-a-d9296f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-05T20:12:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cdb8f6ae-0660-42d8-890d-655d257fa527","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T20:12:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cdb8f6ae-0660-42d8-890d-655d257fa527","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T20:12:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6ba6d115-7ea9-42d5-9aae-56ae4fa4adcb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:51224","PortSpecifier":{"PortValue":51224}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6ba6d115-7ea9-42d5-9aae-56ae4fa4adcb","method":"POST","path":"/ai-tenant-e2e-shared-a-d9296f/rate-test-model-d9296f/v1/completions","host":"e2e-shared-a-d9296f.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T20:12:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6ba6d115-7ea9-42d5-9aae-56ae4fa4adcb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:51224","PortSpecifier":{"PortValue":51224}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783282345,"nanos":748536723},"http":{"id":"6ba6d115-7ea9-42d5-9aae-56ae4fa4adcb","method":"POST","headers":{":authority":"e2e-shared-a-d9296f.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d9296f/rate-test-model-d9296f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:12:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6ba6d115-7ea9-42d5-9aae-56ae4fa4adcb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1btXULvEgG4bRkJAV_2QTuzUaji247a4trcimgRPjEq2HTL8w5aKa6E4M2H31"}
{"level":"debug","ts":"2026-07-05T20:12:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6ba6d115-7ea9-42d5-9aae-56ae4fa4adcb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d9296f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1btXULvEgG4bRkJAV_2QTuzUaji247a4trcimgRPjEq2HTL8w5aKa6E4M2H31\"}"}
{"level":"debug","ts":"2026-07-05T20:12:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6ba6d115-7ea9-42d5-9aae-56ae4fa4adcb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d9296f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"72246add-d1ec-4583-bf1f-74b2e7e5cbdb","keyName":"e2e-rate-a-451c7a","subscription":"e2e-rate-iso-a-451c7a","tenant":"e2e-shared-a-d9296f","userId":"72246add-d1ec-4583-bf1f-74b2e7e5cbdb","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-05T20:12:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6ba6d115-7ea9-42d5-9aae-56ae4fa4adcb","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d9296f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d9296f/rate-test-model-d9296f\",\"requestedSubscription\":\"e2e-rate-iso-a-451c7a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-05T20:12:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6ba6d115-7ea9-42d5-9aae-56ae4fa4adcb","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d9296f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d9296f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-451c7a","namespace":"ai-tenant-e2e-shared-a-d9296f","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-05T20:12:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6ba6d115-7ea9-42d5-9aae-56ae4fa4adcb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:12:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6ba6d115-7ea9-42d5-9aae-56ae4fa4adcb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:12:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6ba6d115-7ea9-42d5-9aae-56ae4fa4adcb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:12:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6ba6d115-7ea9-42d5-9aae-56ae4fa4adcb","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:12:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6ba6d115-7ea9-42d5-9aae-56ae4fa4adcb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d9296f/rate-test-model-d9296f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:12:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6ba6d115-7ea9-42d5-9aae-56ae4fa4adcb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T20:12:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6ba6d115-7ea9-42d5-9aae-56ae4fa4adcb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-451c7a"}
{"level":"debug","ts":"2026-07-05T20:12:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6ba6d115-7ea9-42d5-9aae-56ae4fa4adcb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-05T20:12:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6ba6d115-7ea9-42d5-9aae-56ae4fa4adcb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"72246add-d1ec-4583-bf1f-74b2e7e5cbdb","keyName":"e2e-rate-a-451c7a","selected_subscription":"e2e-rate-iso-a-451c7a","selected_subscription_key":"ai-tenant-e2e-shared-a-d9296f/e2e-rate-iso-a-451c7a@ai-tenant-e2e-shared-a-d9296f/rate-test-model-d9296f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d9296f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-451c7a","namespace":"ai-tenant-e2e-shared-a-d9296f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-05T20:12:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6ba6d115-7ea9-42d5-9aae-56ae4fa4adcb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T20:12:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6ba6d115-7ea9-42d5-9aae-56ae4fa4adcb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T20:12:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"31a85ecd-cbc2-4750-aaf8-c89f4fb2137d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:51228","PortSpecifier":{"PortValue":51228}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"31a85ecd-cbc2-4750-aaf8-c89f4fb2137d","method":"POST","path":"/ai-tenant-e2e-shared-a-d9296f/rate-test-model-d9296f/v1/completions","host":"e2e-shared-a-d9296f.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T20:12:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"31a85ecd-cbc2-4750-aaf8-c89f4fb2137d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:51228","PortSpecifier":{"PortValue":51228}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783282346,"nanos":783142019},"http":{"id":"31a85ecd-cbc2-4750-aaf8-c89f4fb2137d","method":"POST","headers":{":authority":"e2e-shared-a-d9296f.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d9296f/rate-test-model-d9296f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:12:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"31a85ecd-cbc2-4750-aaf8-c89f4fb2137d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1btXULvEgG4bRkJAV_2QTuzUaji247a4trcimgRPjEq2HTL8w5aKa6E4M2H31"}
{"level":"debug","ts":"2026-07-05T20:12:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"31a85ecd-cbc2-4750-aaf8-c89f4fb2137d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d9296f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1btXULvEgG4bRkJAV_2QTuzUaji247a4trcimgRPjEq2HTL8w5aKa6E4M2H31\"}"}
{"level":"debug","ts":"2026-07-05T20:12:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"31a85ecd-cbc2-4750-aaf8-c89f4fb2137d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d9296f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"72246add-d1ec-4583-bf1f-74b2e7e5cbdb","keyName":"e2e-rate-a-451c7a","subscription":"e2e-rate-iso-a-451c7a","tenant":"e2e-shared-a-d9296f","userId":"72246add-d1ec-4583-bf1f-74b2e7e5cbdb","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-05T20:12:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"31a85ecd-cbc2-4750-aaf8-c89f4fb2137d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d9296f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d9296f/rate-test-model-d9296f\",\"requestedSubscription\":\"e2e-rate-iso-a-451c7a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-05T20:12:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"31a85ecd-cbc2-4750-aaf8-c89f4fb2137d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d9296f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d9296f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-451c7a","namespace":"ai-tenant-e2e-shared-a-d9296f","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-05T20:12:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"31a85ecd-cbc2-4750-aaf8-c89f4fb2137d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:12:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31a85ecd-cbc2-4750-aaf8-c89f4fb2137d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:12:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31a85ecd-cbc2-4750-aaf8-c89f4fb2137d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:12:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31a85ecd-cbc2-4750-aaf8-c89f4fb2137d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:12:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31a85ecd-cbc2-4750-aaf8-c89f4fb2137d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d9296f/rate-test-model-d9296f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:12:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"31a85ecd-cbc2-4750-aaf8-c89f4fb2137d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T20:12:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"31a85ecd-cbc2-4750-aaf8-c89f4fb2137d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-05T20:12:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"31a85ecd-cbc2-4750-aaf8-c89f4fb2137d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-451c7a"}
{"level":"debug","ts":"2026-07-05T20:12:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"31a85ecd-cbc2-4750-aaf8-c89f4fb2137d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"72246add-d1ec-4583-bf1f-74b2e7e5cbdb","keyName":"e2e-rate-a-451c7a","selected_subscription":"e2e-rate-iso-a-451c7a","selected_subscription_key":"ai-tenant-e2e-shared-a-d9296f/e2e-rate-iso-a-451c7a@ai-tenant-e2e-shared-a-d9296f/rate-test-model-d9296f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d9296f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-451c7a","namespace":"ai-tenant-e2e-shared-a-d9296f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-05T20:12:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"31a85ecd-cbc2-4750-aaf8-c89f4fb2137d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T20:12:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"31a85ecd-cbc2-4750-aaf8-c89f4fb2137d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T20:12:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"63ee02b6-06bd-4e9a-bbf0-d069ff4dadc8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:51232","PortSpecifier":{"PortValue":51232}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"63ee02b6-06bd-4e9a-bbf0-d069ff4dadc8","method":"POST","path":"/ai-tenant-e2e-shared-a-d9296f/rate-test-model-d9296f/v1/completions","host":"e2e-shared-a-d9296f.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T20:12:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"63ee02b6-06bd-4e9a-bbf0-d069ff4dadc8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:51232","PortSpecifier":{"PortValue":51232}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783282347,"nanos":817592085},"http":{"id":"63ee02b6-06bd-4e9a-bbf0-d069ff4dadc8","method":"POST","headers":{":authority":"e2e-shared-a-d9296f.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d9296f/rate-test-model-d9296f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:12:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"63ee02b6-06bd-4e9a-bbf0-d069ff4dadc8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1btXULvEgG4bRkJAV_2QTuzUaji247a4trcimgRPjEq2HTL8w5aKa6E4M2H31"}
{"level":"debug","ts":"2026-07-05T20:12:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"63ee02b6-06bd-4e9a-bbf0-d069ff4dadc8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d9296f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1btXULvEgG4bRkJAV_2QTuzUaji247a4trcimgRPjEq2HTL8w5aKa6E4M2H31\"}"}
{"level":"debug","ts":"2026-07-05T20:12:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"63ee02b6-06bd-4e9a-bbf0-d069ff4dadc8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d9296f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"72246add-d1ec-4583-bf1f-74b2e7e5cbdb","keyName":"e2e-rate-a-451c7a","subscription":"e2e-rate-iso-a-451c7a","tenant":"e2e-shared-a-d9296f","userId":"72246add-d1ec-4583-bf1f-74b2e7e5cbdb","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-05T20:12:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"63ee02b6-06bd-4e9a-bbf0-d069ff4dadc8","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d9296f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d9296f/rate-test-model-d9296f\",\"requestedSubscription\":\"e2e-rate-iso-a-451c7a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-05T20:12:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"63ee02b6-06bd-4e9a-bbf0-d069ff4dadc8","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d9296f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d9296f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-451c7a","namespace":"ai-tenant-e2e-shared-a-d9296f","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-05T20:12:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"63ee02b6-06bd-4e9a-bbf0-d069ff4dadc8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:12:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"63ee02b6-06bd-4e9a-bbf0-d069ff4dadc8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:12:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"63ee02b6-06bd-4e9a-bbf0-d069ff4dadc8","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:12:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"63ee02b6-06bd-4e9a-bbf0-d069ff4dadc8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:12:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"63ee02b6-06bd-4e9a-bbf0-d069ff4dadc8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d9296f/rate-test-model-d9296f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:12:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"63ee02b6-06bd-4e9a-bbf0-d069ff4dadc8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T20:12:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"63ee02b6-06bd-4e9a-bbf0-d069ff4dadc8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-05T20:12:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"63ee02b6-06bd-4e9a-bbf0-d069ff4dadc8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-451c7a"}
{"level":"debug","ts":"2026-07-05T20:12:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"63ee02b6-06bd-4e9a-bbf0-d069ff4dadc8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"72246add-d1ec-4583-bf1f-74b2e7e5cbdb","keyName":"e2e-rate-a-451c7a","selected_subscription":"e2e-rate-iso-a-451c7a","selected_subscription_key":"ai-tenant-e2e-shared-a-d9296f/e2e-rate-iso-a-451c7a@ai-tenant-e2e-shared-a-d9296f/rate-test-model-d9296f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d9296f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-451c7a","namespace":"ai-tenant-e2e-shared-a-d9296f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-05T20:12:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"63ee02b6-06bd-4e9a-bbf0-d069ff4dadc8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T20:12:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"63ee02b6-06bd-4e9a-bbf0-d069ff4dadc8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T20:12:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e5d4f175-5fb7-49b3-9385-4ddce7c11be6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:51236","PortSpecifier":{"PortValue":51236}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e5d4f175-5fb7-49b3-9385-4ddce7c11be6","method":"POST","path":"/ai-tenant-e2e-shared-a-d9296f/rate-test-model-d9296f/v1/completions","host":"e2e-shared-a-d9296f.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T20:12:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e5d4f175-5fb7-49b3-9385-4ddce7c11be6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:51236","PortSpecifier":{"PortValue":51236}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783282348,"nanos":857742582},"http":{"id":"e5d4f175-5fb7-49b3-9385-4ddce7c11be6","method":"POST","headers":{":authority":"e2e-shared-a-d9296f.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d9296f/rate-test-model-d9296f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:12:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e5d4f175-5fb7-49b3-9385-4ddce7c11be6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1btXULvEgG4bRkJAV_2QTuzUaji247a4trcimgRPjEq2HTL8w5aKa6E4M2H31"}
{"level":"debug","ts":"2026-07-05T20:12:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e5d4f175-5fb7-49b3-9385-4ddce7c11be6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d9296f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1btXULvEgG4bRkJAV_2QTuzUaji247a4trcimgRPjEq2HTL8w5aKa6E4M2H31\"}"}
{"level":"debug","ts":"2026-07-05T20:12:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e5d4f175-5fb7-49b3-9385-4ddce7c11be6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d9296f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"72246add-d1ec-4583-bf1f-74b2e7e5cbdb","keyName":"e2e-rate-a-451c7a","subscription":"e2e-rate-iso-a-451c7a","tenant":"e2e-shared-a-d9296f","userId":"72246add-d1ec-4583-bf1f-74b2e7e5cbdb","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-05T20:12:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e5d4f175-5fb7-49b3-9385-4ddce7c11be6","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d9296f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d9296f/rate-test-model-d9296f\",\"requestedSubscription\":\"e2e-rate-iso-a-451c7a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-05T20:12:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e5d4f175-5fb7-49b3-9385-4ddce7c11be6","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d9296f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d9296f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-451c7a","namespace":"ai-tenant-e2e-shared-a-d9296f","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-05T20:12:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e5d4f175-5fb7-49b3-9385-4ddce7c11be6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:12:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e5d4f175-5fb7-49b3-9385-4ddce7c11be6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:12:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e5d4f175-5fb7-49b3-9385-4ddce7c11be6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:12:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e5d4f175-5fb7-49b3-9385-4ddce7c11be6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d9296f/rate-test-model-d9296f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:12:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e5d4f175-5fb7-49b3-9385-4ddce7c11be6","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:12:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e5d4f175-5fb7-49b3-9385-4ddce7c11be6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T20:12:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e5d4f175-5fb7-49b3-9385-4ddce7c11be6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-05T20:12:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e5d4f175-5fb7-49b3-9385-4ddce7c11be6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-451c7a"}
{"level":"debug","ts":"2026-07-05T20:12:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e5d4f175-5fb7-49b3-9385-4ddce7c11be6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"72246add-d1ec-4583-bf1f-74b2e7e5cbdb","keyName":"e2e-rate-a-451c7a","selected_subscription":"e2e-rate-iso-a-451c7a","selected_subscription_key":"ai-tenant-e2e-shared-a-d9296f/e2e-rate-iso-a-451c7a@ai-tenant-e2e-shared-a-d9296f/rate-test-model-d9296f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d9296f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-451c7a","namespace":"ai-tenant-e2e-shared-a-d9296f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-05T20:12:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e5d4f175-5fb7-49b3-9385-4ddce7c11be6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T20:12:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e5d4f175-5fb7-49b3-9385-4ddce7c11be6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T20:12:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b53ebc5f-9a94-4cbc-9119-613daefa4c0a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:55290","PortSpecifier":{"PortValue":55290}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b53ebc5f-9a94-4cbc-9119-613daefa4c0a","method":"POST","path":"/ai-tenant-e2e-shared-b-65fb4d/rate-test-model-65fb4d/v1/completions","host":"e2e-shared-b-65fb4d.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T20:12:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b53ebc5f-9a94-4cbc-9119-613daefa4c0a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:55290","PortSpecifier":{"PortValue":55290}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783282348,"nanos":892516287},"http":{"id":"b53ebc5f-9a94-4cbc-9119-613daefa4c0a","method":"POST","headers":{":authority":"e2e-shared-b-65fb4d.apps.e603dd5b-08ee-40f2-b1cd-fe635c3faecd.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-65fb4d/rate-test-model-65fb4d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:12:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b53ebc5f-9a94-4cbc-9119-613daefa4c0a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-z8It92mK58TphiH5_j6Am9tKZfa2WjdvQftehNnXgmJeKBV92MYXtNkliemM"}
{"level":"debug","ts":"2026-07-05T20:12:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b53ebc5f-9a94-4cbc-9119-613daefa4c0a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-65fb4d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-z8It92mK58TphiH5_j6Am9tKZfa2WjdvQftehNnXgmJeKBV92MYXtNkliemM\"}"}
{"level":"debug","ts":"2026-07-05T20:12:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b53ebc5f-9a94-4cbc-9119-613daefa4c0a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-65fb4d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d6135e25-5892-4472-9e4e-d9eafb81f831","keyName":"e2e-rate-b-451c7a","subscription":"e2e-rate-iso-b-451c7a","tenant":"e2e-shared-b-65fb4d","userId":"d6135e25-5892-4472-9e4e-d9eafb81f831","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-05T20:12:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b53ebc5f-9a94-4cbc-9119-613daefa4c0a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-65fb4d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-65fb4d/rate-test-model-65fb4d\",\"requestedSubscription\":\"e2e-rate-iso-b-451c7a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-05T20:12:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b53ebc5f-9a94-4cbc-9119-613daefa4c0a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-65fb4d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-65fb4d","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-451c7a","namespace":"ai-tenant-e2e-shared-b-65fb4d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-05T20:12:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b53ebc5f-9a94-4cbc-9119-613daefa4c0a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T20:12:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b53ebc5f-9a94-4cbc-9119-613daefa4c0a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:12:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b53ebc5f-9a94-4cbc-9119-613daefa4c0a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:12:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b53ebc5f-9a94-4cbc-9119-613daefa4c0a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-65fb4d/rate-test-model-65fb4d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:12:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b53ebc5f-9a94-4cbc-9119-613daefa4c0a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T20:12:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b53ebc5f-9a94-4cbc-9119-613daefa4c0a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T20:12:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b53ebc5f-9a94-4cbc-9119-613daefa4c0a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-451c7a"}
{"level":"debug","ts":"2026-07-05T20:12:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b53ebc5f-9a94-4cbc-9119-613daefa4c0a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-05T20:12:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b53ebc5f-9a94-4cbc-9119-613daefa4c0a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d6135e25-5892-4472-9e4e-d9eafb81f831","keyName":"e2e-rate-b-451c7a","selected_subscription":"e2e-rate-iso-b-451c7a","selected_subscription_key":"ai-tenant-e2e-shared-b-65fb4d/e2e-rate-iso-b-451c7a@ai-tenant-e2e-shared-b-65fb4d/rate-test-model-65fb4d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-65fb4d","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-451c7a","namespace":"ai-tenant-e2e-shared-b-65fb4d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-05T20:12:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b53ebc5f-9a94-4cbc-9119-613daefa4c0a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T20:12:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b53ebc5f-9a94-4cbc-9119-613daefa4c0a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T20:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/30b5dae009ee2807290974e6b4f01845b4b815352d017f4bb8c16a6b61ab8819"}
{"level":"info","ts":"2026-07-05T20:12:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/342dff0f76b4f8fb6fceeb077a598870ef5966f33c33b1d90917e3fbcd461718"}
{"level":"info","ts":"2026-07-05T20:12:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5e9bce44b2ab7b915d89113bb1af51084279cf940d684956815d341c431e5019"}
{"level":"info","ts":"2026-07-05T20:12:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a1f5bce244102ff39007c0930ff8c9627eb0680f0b5fe526507fe5be07e37f89"}
{"level":"info","ts":"2026-07-05T20:12:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4fc5fc830ab4bc920b82404287549a54e3fbb5417c0b1d1a46b99350c00245b3"}
{"level":"info","ts":"2026-07-05T20:12:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5f1da078aad486df34cadd380b07369ca9aeeb024f33174b6d6a1363c3227089"}
{"level":"info","ts":"2026-07-05T20:12:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9fd73cc03ccdf994c01e09a5f385c9ac51117742b18f7326a9b058a8299eb378"}
{"level":"info","ts":"2026-07-05T20:12:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/60bf86d55aad97aa58c4d83e017c17f11be69180d6390eb8b8c608325fc6d284"}
{"level":"info","ts":"2026-07-05T20:12:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bd8a35ef86981994abed12c65ac256dfbec8ca1bb61f427abb6253693e2aa29f"}
{"level":"info","ts":"2026-07-05T20:12:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c7b5275760ece018e34a1e424681fe412e2f88fc047a4ab85d79e8ac8035deb6"}
{"level":"info","ts":"2026-07-05T20:12:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/30cda358b1b0c8ada24c7283cc6118c0d0c0ef3bd9b290c4762d4b7aae63663c"}
{"level":"info","ts":"2026-07-05T20:12:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/34951b936d3776c43a9fe08aac8ef6173640e2a0de205268de142a4a37da1cb5"}
{"level":"info","ts":"2026-07-05T20:12:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e92c5899307f917b397acd0d0f68d4515d070326a975efebcbca7f15402a7272"}
{"level":"info","ts":"2026-07-05T20:12:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e442455723e6c69d34065414c754918099a84ad85029fbfca0e19e756d52db65"}
{"level":"info","ts":"2026-07-05T20:12:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aa19c5e864662748183d2f5e327f681f82630dbbf21aea1b8849733119adaf82"}
{"level":"info","ts":"2026-07-05T20:12:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/32d95c2a8fcd14bdab3f1c0cf60327ac29762f233e525fcf9783da2eab14d4c4"}
{"level":"info","ts":"2026-07-05T20:12:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3c4f99a6b97f246fabace8d56656496ea78154b654da65418215bc2db78ade4b"}
{"level":"info","ts":"2026-07-05T20:12:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4cd73c0140d8a6e5f28ca20c3c5a798343e0b654820a2ccad27e8d7c922456e0"}
{"level":"info","ts":"2026-07-05T20:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ad4b9f1d7e7b1d005dfaf2c8de6522f639cbffc7106d9d98d01e9bd6d3b0473d"}
{"level":"info","ts":"2026-07-05T20:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0b6e12c5e8e999af4adf079025c3820257b39ee3ab0e144ad3813047dea25fd3"}