--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"info","ts":"2026-07-15T16:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d71902ee963bcae6f17623fac48f8887e654c90a0bd238a149765540dd14605"}
{"level":"info","ts":"2026-07-15T16:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/689efc089a566798d2b9e90c2513b60ea471b1c19eb5ef83390684a6b038631d"}
{"level":"debug","ts":"2026-07-15T16:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b620a81fb1078e87d0cb0e8abfd9d46f71a3a19dd0bfc99217dbd3e76f3bd13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"689efc089a566798d2b9e90c2513b60ea471b1c19eb5ef83390684a6b038631d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:59:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:59:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["689efc089a566798d2b9e90c2513b60ea471b1c19eb5ef83390684a6b038631d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85c8fb50939cc50a25e9718017ea814a409a682f81408b5cc01558af14435034"}
{"level":"info","ts":"2026-07-15T16:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"689efc089a566798d2b9e90c2513b60ea471b1c19eb5ef83390684a6b038631d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"689efc089a566798d2b9e90c2513b60ea471b1c19eb5ef83390684a6b038631d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b620a81fb1078e87d0cb0e8abfd9d46f71a3a19dd0bfc99217dbd3e76f3bd13"}
{"level":"info","ts":"2026-07-15T16:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/689efc089a566798d2b9e90c2513b60ea471b1c19eb5ef83390684a6b038631d"}
{"level":"debug","ts":"2026-07-15T16:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b620a81fb1078e87d0cb0e8abfd9d46f71a3a19dd0bfc99217dbd3e76f3bd13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:59:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:59:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1b620a81fb1078e87d0cb0e8abfd9d46f71a3a19dd0bfc99217dbd3e76f3bd13"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b620a81fb1078e87d0cb0e8abfd9d46f71a3a19dd0bfc99217dbd3e76f3bd13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b620a81fb1078e87d0cb0e8abfd9d46f71a3a19dd0bfc99217dbd3e76f3bd13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:59:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:59:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b620a81fb1078e87d0cb0e8abfd9d46f71a3a19dd0bfc99217dbd3e76f3bd13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b620a81fb1078e87d0cb0e8abfd9d46f71a3a19dd0bfc99217dbd3e76f3bd13","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b620a81fb1078e87d0cb0e8abfd9d46f71a3a19dd0bfc99217dbd3e76f3bd13"}
{"level":"debug","ts":"2026-07-15T16:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b620a81fb1078e87d0cb0e8abfd9d46f71a3a19dd0bfc99217dbd3e76f3bd13","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b620a81fb1078e87d0cb0e8abfd9d46f71a3a19dd0bfc99217dbd3e76f3bd13"}
{"level":"debug","ts":"2026-07-15T16:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b620a81fb1078e87d0cb0e8abfd9d46f71a3a19dd0bfc99217dbd3e76f3bd13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:59:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:59:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1b620a81fb1078e87d0cb0e8abfd9d46f71a3a19dd0bfc99217dbd3e76f3bd13"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b620a81fb1078e87d0cb0e8abfd9d46f71a3a19dd0bfc99217dbd3e76f3bd13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b620a81fb1078e87d0cb0e8abfd9d46f71a3a19dd0bfc99217dbd3e76f3bd13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:59:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:59:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b620a81fb1078e87d0cb0e8abfd9d46f71a3a19dd0bfc99217dbd3e76f3bd13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b620a81fb1078e87d0cb0e8abfd9d46f71a3a19dd0bfc99217dbd3e76f3bd13","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b620a81fb1078e87d0cb0e8abfd9d46f71a3a19dd0bfc99217dbd3e76f3bd13"}
{"level":"debug","ts":"2026-07-15T16:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b620a81fb1078e87d0cb0e8abfd9d46f71a3a19dd0bfc99217dbd3e76f3bd13","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b620a81fb1078e87d0cb0e8abfd9d46f71a3a19dd0bfc99217dbd3e76f3bd13"}
{"level":"debug","ts":"2026-07-15T16:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b620a81fb1078e87d0cb0e8abfd9d46f71a3a19dd0bfc99217dbd3e76f3bd13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:59:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:59:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1b620a81fb1078e87d0cb0e8abfd9d46f71a3a19dd0bfc99217dbd3e76f3bd13"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b620a81fb1078e87d0cb0e8abfd9d46f71a3a19dd0bfc99217dbd3e76f3bd13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b620a81fb1078e87d0cb0e8abfd9d46f71a3a19dd0bfc99217dbd3e76f3bd13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:59:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:59:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b620a81fb1078e87d0cb0e8abfd9d46f71a3a19dd0bfc99217dbd3e76f3bd13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b620a81fb1078e87d0cb0e8abfd9d46f71a3a19dd0bfc99217dbd3e76f3bd13","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b620a81fb1078e87d0cb0e8abfd9d46f71a3a19dd0bfc99217dbd3e76f3bd13"}
{"level":"debug","ts":"2026-07-15T16:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b620a81fb1078e87d0cb0e8abfd9d46f71a3a19dd0bfc99217dbd3e76f3bd13","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b620a81fb1078e87d0cb0e8abfd9d46f71a3a19dd0bfc99217dbd3e76f3bd13"}
{"level":"debug","ts":"2026-07-15T16:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b620a81fb1078e87d0cb0e8abfd9d46f71a3a19dd0bfc99217dbd3e76f3bd13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:59:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:59:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1b620a81fb1078e87d0cb0e8abfd9d46f71a3a19dd0bfc99217dbd3e76f3bd13"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b620a81fb1078e87d0cb0e8abfd9d46f71a3a19dd0bfc99217dbd3e76f3bd13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b620a81fb1078e87d0cb0e8abfd9d46f71a3a19dd0bfc99217dbd3e76f3bd13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:59:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:59:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b620a81fb1078e87d0cb0e8abfd9d46f71a3a19dd0bfc99217dbd3e76f3bd13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b620a81fb1078e87d0cb0e8abfd9d46f71a3a19dd0bfc99217dbd3e76f3bd13","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b620a81fb1078e87d0cb0e8abfd9d46f71a3a19dd0bfc99217dbd3e76f3bd13"}
{"level":"debug","ts":"2026-07-15T16:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b620a81fb1078e87d0cb0e8abfd9d46f71a3a19dd0bfc99217dbd3e76f3bd13","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b620a81fb1078e87d0cb0e8abfd9d46f71a3a19dd0bfc99217dbd3e76f3bd13"}
{"level":"debug","ts":"2026-07-15T16:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b620a81fb1078e87d0cb0e8abfd9d46f71a3a19dd0bfc99217dbd3e76f3bd13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:59:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:59:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1b620a81fb1078e87d0cb0e8abfd9d46f71a3a19dd0bfc99217dbd3e76f3bd13"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b620a81fb1078e87d0cb0e8abfd9d46f71a3a19dd0bfc99217dbd3e76f3bd13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b620a81fb1078e87d0cb0e8abfd9d46f71a3a19dd0bfc99217dbd3e76f3bd13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:59:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:59:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b620a81fb1078e87d0cb0e8abfd9d46f71a3a19dd0bfc99217dbd3e76f3bd13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b620a81fb1078e87d0cb0e8abfd9d46f71a3a19dd0bfc99217dbd3e76f3bd13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b620a81fb1078e87d0cb0e8abfd9d46f71a3a19dd0bfc99217dbd3e76f3bd13","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b620a81fb1078e87d0cb0e8abfd9d46f71a3a19dd0bfc99217dbd3e76f3bd13"}
{"level":"debug","ts":"2026-07-15T16:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b620a81fb1078e87d0cb0e8abfd9d46f71a3a19dd0bfc99217dbd3e76f3bd13","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b620a81fb1078e87d0cb0e8abfd9d46f71a3a19dd0bfc99217dbd3e76f3bd13"}
{"level":"debug","ts":"2026-07-15T16:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b620a81fb1078e87d0cb0e8abfd9d46f71a3a19dd0bfc99217dbd3e76f3bd13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:59:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:59:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1b620a81fb1078e87d0cb0e8abfd9d46f71a3a19dd0bfc99217dbd3e76f3bd13"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b620a81fb1078e87d0cb0e8abfd9d46f71a3a19dd0bfc99217dbd3e76f3bd13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b620a81fb1078e87d0cb0e8abfd9d46f71a3a19dd0bfc99217dbd3e76f3bd13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:59:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:59:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b620a81fb1078e87d0cb0e8abfd9d46f71a3a19dd0bfc99217dbd3e76f3bd13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b620a81fb1078e87d0cb0e8abfd9d46f71a3a19dd0bfc99217dbd3e76f3bd13","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b620a81fb1078e87d0cb0e8abfd9d46f71a3a19dd0bfc99217dbd3e76f3bd13"}
{"level":"debug","ts":"2026-07-15T16:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b620a81fb1078e87d0cb0e8abfd9d46f71a3a19dd0bfc99217dbd3e76f3bd13","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b620a81fb1078e87d0cb0e8abfd9d46f71a3a19dd0bfc99217dbd3e76f3bd13"}
{"level":"debug","ts":"2026-07-15T16:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b620a81fb1078e87d0cb0e8abfd9d46f71a3a19dd0bfc99217dbd3e76f3bd13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:59:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:59:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1b620a81fb1078e87d0cb0e8abfd9d46f71a3a19dd0bfc99217dbd3e76f3bd13"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b620a81fb1078e87d0cb0e8abfd9d46f71a3a19dd0bfc99217dbd3e76f3bd13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b620a81fb1078e87d0cb0e8abfd9d46f71a3a19dd0bfc99217dbd3e76f3bd13","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b620a81fb1078e87d0cb0e8abfd9d46f71a3a19dd0bfc99217dbd3e76f3bd13"}
{"level":"debug","ts":"2026-07-15T16:59:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"872855411184ec9089cef59b060aac86e543405cadd122ed2669b56ca3f6c07b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:59:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:59:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:59:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/872855411184ec9089cef59b060aac86e543405cadd122ed2669b56ca3f6c07b"}
{"level":"info","ts":"2026-07-15T16:59:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"872855411184ec9089cef59b060aac86e543405cadd122ed2669b56ca3f6c07b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"872855411184ec9089cef59b060aac86e543405cadd122ed2669b56ca3f6c07b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:59:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:59:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["872855411184ec9089cef59b060aac86e543405cadd122ed2669b56ca3f6c07b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:59:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/872855411184ec9089cef59b060aac86e543405cadd122ed2669b56ca3f6c07b"}
{"level":"info","ts":"2026-07-15T16:59:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"872855411184ec9089cef59b060aac86e543405cadd122ed2669b56ca3f6c07b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"872855411184ec9089cef59b060aac86e543405cadd122ed2669b56ca3f6c07b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:59:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:59:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:59:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"872855411184ec9089cef59b060aac86e543405cadd122ed2669b56ca3f6c07b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:59:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/872855411184ec9089cef59b060aac86e543405cadd122ed2669b56ca3f6c07b"}
{"level":"debug","ts":"2026-07-15T16:59:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"872855411184ec9089cef59b060aac86e543405cadd122ed2669b56ca3f6c07b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"872855411184ec9089cef59b060aac86e543405cadd122ed2669b56ca3f6c07b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:59:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/872855411184ec9089cef59b060aac86e543405cadd122ed2669b56ca3f6c07b"}
{"level":"debug","ts":"2026-07-15T16:59:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"872855411184ec9089cef59b060aac86e543405cadd122ed2669b56ca3f6c07b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:59:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:59:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["872855411184ec9089cef59b060aac86e543405cadd122ed2669b56ca3f6c07b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:59:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"872855411184ec9089cef59b060aac86e543405cadd122ed2669b56ca3f6c07b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"872855411184ec9089cef59b060aac86e543405cadd122ed2669b56ca3f6c07b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:59:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:59:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:59:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"872855411184ec9089cef59b060aac86e543405cadd122ed2669b56ca3f6c07b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"872855411184ec9089cef59b060aac86e543405cadd122ed2669b56ca3f6c07b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:59:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/872855411184ec9089cef59b060aac86e543405cadd122ed2669b56ca3f6c07b"}
{"level":"debug","ts":"2026-07-15T16:59:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"872855411184ec9089cef59b060aac86e543405cadd122ed2669b56ca3f6c07b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"872855411184ec9089cef59b060aac86e543405cadd122ed2669b56ca3f6c07b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:59:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/872855411184ec9089cef59b060aac86e543405cadd122ed2669b56ca3f6c07b"}
{"level":"debug","ts":"2026-07-15T16:59:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"872855411184ec9089cef59b060aac86e543405cadd122ed2669b56ca3f6c07b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:59:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:59:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["872855411184ec9089cef59b060aac86e543405cadd122ed2669b56ca3f6c07b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:59:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"872855411184ec9089cef59b060aac86e543405cadd122ed2669b56ca3f6c07b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"872855411184ec9089cef59b060aac86e543405cadd122ed2669b56ca3f6c07b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:59:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:59:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:59:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"872855411184ec9089cef59b060aac86e543405cadd122ed2669b56ca3f6c07b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:59:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/872855411184ec9089cef59b060aac86e543405cadd122ed2669b56ca3f6c07b"}
{"level":"debug","ts":"2026-07-15T16:59:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"872855411184ec9089cef59b060aac86e543405cadd122ed2669b56ca3f6c07b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:59:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:59:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["872855411184ec9089cef59b060aac86e543405cadd122ed2669b56ca3f6c07b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:59:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"872855411184ec9089cef59b060aac86e543405cadd122ed2669b56ca3f6c07b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"872855411184ec9089cef59b060aac86e543405cadd122ed2669b56ca3f6c07b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"872855411184ec9089cef59b060aac86e543405cadd122ed2669b56ca3f6c07b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:59:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:59:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:59:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/872855411184ec9089cef59b060aac86e543405cadd122ed2669b56ca3f6c07b"}
{"level":"info","ts":"2026-07-15T16:59:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"872855411184ec9089cef59b060aac86e543405cadd122ed2669b56ca3f6c07b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"872855411184ec9089cef59b060aac86e543405cadd122ed2669b56ca3f6c07b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:59:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:59:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"872855411184ec9089cef59b060aac86e543405cadd122ed2669b56ca3f6c07b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"872855411184ec9089cef59b060aac86e543405cadd122ed2669b56ca3f6c07b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"info","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/872855411184ec9089cef59b060aac86e543405cadd122ed2669b56ca3f6c07b"}
{"level":"debug","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"872855411184ec9089cef59b060aac86e543405cadd122ed2669b56ca3f6c07b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:59:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:59:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["872855411184ec9089cef59b060aac86e543405cadd122ed2669b56ca3f6c07b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"872855411184ec9089cef59b060aac86e543405cadd122ed2669b56ca3f6c07b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"872855411184ec9089cef59b060aac86e543405cadd122ed2669b56ca3f6c07b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:59:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:59:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/872855411184ec9089cef59b060aac86e543405cadd122ed2669b56ca3f6c07b"}
{"level":"info","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"872855411184ec9089cef59b060aac86e543405cadd122ed2669b56ca3f6c07b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"872855411184ec9089cef59b060aac86e543405cadd122ed2669b56ca3f6c07b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"872855411184ec9089cef59b060aac86e543405cadd122ed2669b56ca3f6c07b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/872855411184ec9089cef59b060aac86e543405cadd122ed2669b56ca3f6c07b"}
{"level":"debug","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"872855411184ec9089cef59b060aac86e543405cadd122ed2669b56ca3f6c07b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/872855411184ec9089cef59b060aac86e543405cadd122ed2669b56ca3f6c07b"}
{"level":"debug","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"872855411184ec9089cef59b060aac86e543405cadd122ed2669b56ca3f6c07b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:59:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:59:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["872855411184ec9089cef59b060aac86e543405cadd122ed2669b56ca3f6c07b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"872855411184ec9089cef59b060aac86e543405cadd122ed2669b56ca3f6c07b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"872855411184ec9089cef59b060aac86e543405cadd122ed2669b56ca3f6c07b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:59:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:59:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/872855411184ec9089cef59b060aac86e543405cadd122ed2669b56ca3f6c07b"}
{"level":"info","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"872855411184ec9089cef59b060aac86e543405cadd122ed2669b56ca3f6c07b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"872855411184ec9089cef59b060aac86e543405cadd122ed2669b56ca3f6c07b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:59:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:59:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["872855411184ec9089cef59b060aac86e543405cadd122ed2669b56ca3f6c07b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"872855411184ec9089cef59b060aac86e543405cadd122ed2669b56ca3f6c07b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96cc8cd23b34933b52c36da5019e00819db46b0bccbd6d51f77700caa5b5abfb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:59:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:59:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/872855411184ec9089cef59b060aac86e543405cadd122ed2669b56ca3f6c07b"}
{"level":"info","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96cc8cd23b34933b52c36da5019e00819db46b0bccbd6d51f77700caa5b5abfb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"872855411184ec9089cef59b060aac86e543405cadd122ed2669b56ca3f6c07b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96cc8cd23b34933b52c36da5019e00819db46b0bccbd6d51f77700caa5b5abfb"}
{"level":"debug","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96cc8cd23b34933b52c36da5019e00819db46b0bccbd6d51f77700caa5b5abfb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:59:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:59:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["96cc8cd23b34933b52c36da5019e00819db46b0bccbd6d51f77700caa5b5abfb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96cc8cd23b34933b52c36da5019e00819db46b0bccbd6d51f77700caa5b5abfb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96cc8cd23b34933b52c36da5019e00819db46b0bccbd6d51f77700caa5b5abfb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:59:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:59:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["96cc8cd23b34933b52c36da5019e00819db46b0bccbd6d51f77700caa5b5abfb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/872855411184ec9089cef59b060aac86e543405cadd122ed2669b56ca3f6c07b"}
{"level":"error","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"96cc8cd23b34933b52c36da5019e00819db46b0bccbd6d51f77700caa5b5abfb","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"96cc8cd23b34933b52c36da5019e00819db46b0bccbd6d51f77700caa5b5abfb\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96cc8cd23b34933b52c36da5019e00819db46b0bccbd6d51f77700caa5b5abfb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:59:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:59:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96cc8cd23b34933b52c36da5019e00819db46b0bccbd6d51f77700caa5b5abfb"}
{"level":"info","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96cc8cd23b34933b52c36da5019e00819db46b0bccbd6d51f77700caa5b5abfb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b298324dd174b93effdcd5fbeeb1d980be3e0ee1fb5f9722c53fcd723bfa4271","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:59:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:59:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b298324dd174b93effdcd5fbeeb1d980be3e0ee1fb5f9722c53fcd723bfa4271","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96cc8cd23b34933b52c36da5019e00819db46b0bccbd6d51f77700caa5b5abfb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:59:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:59:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["96cc8cd23b34933b52c36da5019e00819db46b0bccbd6d51f77700caa5b5abfb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b298324dd174b93effdcd5fbeeb1d980be3e0ee1fb5f9722c53fcd723bfa4271"}
{"level":"info","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96cc8cd23b34933b52c36da5019e00819db46b0bccbd6d51f77700caa5b5abfb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b298324dd174b93effdcd5fbeeb1d980be3e0ee1fb5f9722c53fcd723bfa4271","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:59:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:59:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b298324dd174b93effdcd5fbeeb1d980be3e0ee1fb5f9722c53fcd723bfa4271"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96cc8cd23b34933b52c36da5019e00819db46b0bccbd6d51f77700caa5b5abfb"}
{"level":"info","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b298324dd174b93effdcd5fbeeb1d980be3e0ee1fb5f9722c53fcd723bfa4271","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"96cc8cd23b34933b52c36da5019e00819db46b0bccbd6d51f77700caa5b5abfb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b298324dd174b93effdcd5fbeeb1d980be3e0ee1fb5f9722c53fcd723bfa4271","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:59:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:59:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b298324dd174b93effdcd5fbeeb1d980be3e0ee1fb5f9722c53fcd723bfa4271"}
{"level":"info","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b298324dd174b93effdcd5fbeeb1d980be3e0ee1fb5f9722c53fcd723bfa4271","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b298324dd174b93effdcd5fbeeb1d980be3e0ee1fb5f9722c53fcd723bfa4271","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:59:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:59:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b298324dd174b93effdcd5fbeeb1d980be3e0ee1fb5f9722c53fcd723bfa4271"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96cc8cd23b34933b52c36da5019e00819db46b0bccbd6d51f77700caa5b5abfb"}
{"level":"info","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b298324dd174b93effdcd5fbeeb1d980be3e0ee1fb5f9722c53fcd723bfa4271","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b298324dd174b93effdcd5fbeeb1d980be3e0ee1fb5f9722c53fcd723bfa4271","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b298324dd174b93effdcd5fbeeb1d980be3e0ee1fb5f9722c53fcd723bfa4271","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:59:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:59:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b298324dd174b93effdcd5fbeeb1d980be3e0ee1fb5f9722c53fcd723bfa4271"}
{"level":"info","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b298324dd174b93effdcd5fbeeb1d980be3e0ee1fb5f9722c53fcd723bfa4271","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b298324dd174b93effdcd5fbeeb1d980be3e0ee1fb5f9722c53fcd723bfa4271","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:59:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:59:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b298324dd174b93effdcd5fbeeb1d980be3e0ee1fb5f9722c53fcd723bfa4271"}
{"level":"error","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b298324dd174b93effdcd5fbeeb1d980be3e0ee1fb5f9722c53fcd723bfa4271","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b298324dd174b93effdcd5fbeeb1d980be3e0ee1fb5f9722c53fcd723bfa4271\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b298324dd174b93effdcd5fbeeb1d980be3e0ee1fb5f9722c53fcd723bfa4271","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b298324dd174b93effdcd5fbeeb1d980be3e0ee1fb5f9722c53fcd723bfa4271"}
{"level":"debug","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66b3bc1194ce5f649ee3494b9e009b24d0d94ab79716e6de31e0f00bbd392751","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:59:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:59:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66b3bc1194ce5f649ee3494b9e009b24d0d94ab79716e6de31e0f00bbd392751"}
{"level":"info","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66b3bc1194ce5f649ee3494b9e009b24d0d94ab79716e6de31e0f00bbd392751","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b298324dd174b93effdcd5fbeeb1d980be3e0ee1fb5f9722c53fcd723bfa4271","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:59:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:59:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b298324dd174b93effdcd5fbeeb1d980be3e0ee1fb5f9722c53fcd723bfa4271"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66b3bc1194ce5f649ee3494b9e009b24d0d94ab79716e6de31e0f00bbd392751"}
{"level":"info","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b298324dd174b93effdcd5fbeeb1d980be3e0ee1fb5f9722c53fcd723bfa4271","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66b3bc1194ce5f649ee3494b9e009b24d0d94ab79716e6de31e0f00bbd392751","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:59:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:59:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["66b3bc1194ce5f649ee3494b9e009b24d0d94ab79716e6de31e0f00bbd392751"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b298324dd174b93effdcd5fbeeb1d980be3e0ee1fb5f9722c53fcd723bfa4271"}
{"level":"info","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66b3bc1194ce5f649ee3494b9e009b24d0d94ab79716e6de31e0f00bbd392751","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b298324dd174b93effdcd5fbeeb1d980be3e0ee1fb5f9722c53fcd723bfa4271","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66b3bc1194ce5f649ee3494b9e009b24d0d94ab79716e6de31e0f00bbd392751","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:59:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:59:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66b3bc1194ce5f649ee3494b9e009b24d0d94ab79716e6de31e0f00bbd392751"}
{"level":"info","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66b3bc1194ce5f649ee3494b9e009b24d0d94ab79716e6de31e0f00bbd392751","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66b3bc1194ce5f649ee3494b9e009b24d0d94ab79716e6de31e0f00bbd392751","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66b3bc1194ce5f649ee3494b9e009b24d0d94ab79716e6de31e0f00bbd392751","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66b3bc1194ce5f649ee3494b9e009b24d0d94ab79716e6de31e0f00bbd392751"}
{"level":"debug","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66b3bc1194ce5f649ee3494b9e009b24d0d94ab79716e6de31e0f00bbd392751","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:59:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:59:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["66b3bc1194ce5f649ee3494b9e009b24d0d94ab79716e6de31e0f00bbd392751"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66b3bc1194ce5f649ee3494b9e009b24d0d94ab79716e6de31e0f00bbd392751","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66b3bc1194ce5f649ee3494b9e009b24d0d94ab79716e6de31e0f00bbd392751","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:59:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:59:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66b3bc1194ce5f649ee3494b9e009b24d0d94ab79716e6de31e0f00bbd392751","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66b3bc1194ce5f649ee3494b9e009b24d0d94ab79716e6de31e0f00bbd392751","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66b3bc1194ce5f649ee3494b9e009b24d0d94ab79716e6de31e0f00bbd392751"}
{"level":"debug","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66b3bc1194ce5f649ee3494b9e009b24d0d94ab79716e6de31e0f00bbd392751","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66b3bc1194ce5f649ee3494b9e009b24d0d94ab79716e6de31e0f00bbd392751"}
{"level":"debug","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66b3bc1194ce5f649ee3494b9e009b24d0d94ab79716e6de31e0f00bbd392751","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:59:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:59:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["66b3bc1194ce5f649ee3494b9e009b24d0d94ab79716e6de31e0f00bbd392751"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66b3bc1194ce5f649ee3494b9e009b24d0d94ab79716e6de31e0f00bbd392751","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66b3bc1194ce5f649ee3494b9e009b24d0d94ab79716e6de31e0f00bbd392751","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:59:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:59:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66b3bc1194ce5f649ee3494b9e009b24d0d94ab79716e6de31e0f00bbd392751"}
{"level":"info","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66b3bc1194ce5f649ee3494b9e009b24d0d94ab79716e6de31e0f00bbd392751","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aebdd4492be46c28f49d6f028d2ae2373cfd06299b661a61ebe143c2171f5b6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:59:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:59:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aebdd4492be46c28f49d6f028d2ae2373cfd06299b661a61ebe143c2171f5b6b"}
{"level":"info","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aebdd4492be46c28f49d6f028d2ae2373cfd06299b661a61ebe143c2171f5b6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66b3bc1194ce5f649ee3494b9e009b24d0d94ab79716e6de31e0f00bbd392751","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aebdd4492be46c28f49d6f028d2ae2373cfd06299b661a61ebe143c2171f5b6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:59:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:59:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aebdd4492be46c28f49d6f028d2ae2373cfd06299b661a61ebe143c2171f5b6b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66b3bc1194ce5f649ee3494b9e009b24d0d94ab79716e6de31e0f00bbd392751"}
{"level":"info","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aebdd4492be46c28f49d6f028d2ae2373cfd06299b661a61ebe143c2171f5b6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66b3bc1194ce5f649ee3494b9e009b24d0d94ab79716e6de31e0f00bbd392751","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:59:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:59:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["66b3bc1194ce5f649ee3494b9e009b24d0d94ab79716e6de31e0f00bbd392751"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aebdd4492be46c28f49d6f028d2ae2373cfd06299b661a61ebe143c2171f5b6b"}
{"level":"info","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66b3bc1194ce5f649ee3494b9e009b24d0d94ab79716e6de31e0f00bbd392751","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aebdd4492be46c28f49d6f028d2ae2373cfd06299b661a61ebe143c2171f5b6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:59:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:59:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aebdd4492be46c28f49d6f028d2ae2373cfd06299b661a61ebe143c2171f5b6b"}
{"level":"info","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9006bcd64adf2438e9d026356dd007d07411c3b54a067d90bbada1f2285442d"}
{"level":"info","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aebdd4492be46c28f49d6f028d2ae2373cfd06299b661a61ebe143c2171f5b6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9006bcd64adf2438e9d026356dd007d07411c3b54a067d90bbada1f2285442d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:59:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:59:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e9006bcd64adf2438e9d026356dd007d07411c3b54a067d90bbada1f2285442d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66b3bc1194ce5f649ee3494b9e009b24d0d94ab79716e6de31e0f00bbd392751"}
{"level":"info","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9006bcd64adf2438e9d026356dd007d07411c3b54a067d90bbada1f2285442d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66b3bc1194ce5f649ee3494b9e009b24d0d94ab79716e6de31e0f00bbd392751","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aebdd4492be46c28f49d6f028d2ae2373cfd06299b661a61ebe143c2171f5b6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9006bcd64adf2438e9d026356dd007d07411c3b54a067d90bbada1f2285442d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aebdd4492be46c28f49d6f028d2ae2373cfd06299b661a61ebe143c2171f5b6b"}
{"level":"debug","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aebdd4492be46c28f49d6f028d2ae2373cfd06299b661a61ebe143c2171f5b6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:59:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:59:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aebdd4492be46c28f49d6f028d2ae2373cfd06299b661a61ebe143c2171f5b6b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9006bcd64adf2438e9d026356dd007d07411c3b54a067d90bbada1f2285442d"}
{"level":"info","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aebdd4492be46c28f49d6f028d2ae2373cfd06299b661a61ebe143c2171f5b6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea3dbee35bd581385c8c2a8f66c7e1c8a2d5e32e48983d30d69e206ade5d12ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:59:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:59:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea3dbee35bd581385c8c2a8f66c7e1c8a2d5e32e48983d30d69e206ade5d12ad"}
{"level":"info","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea3dbee35bd581385c8c2a8f66c7e1c8a2d5e32e48983d30d69e206ade5d12ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aebdd4492be46c28f49d6f028d2ae2373cfd06299b661a61ebe143c2171f5b6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:59:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:59:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aebdd4492be46c28f49d6f028d2ae2373cfd06299b661a61ebe143c2171f5b6b"}
{"level":"info","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aebdd4492be46c28f49d6f028d2ae2373cfd06299b661a61ebe143c2171f5b6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea3dbee35bd581385c8c2a8f66c7e1c8a2d5e32e48983d30d69e206ade5d12ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fb6ee5305693e45b789d14b0ee61e9537365b8323f18e2919e496a2827a6e90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:59:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:59:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea3dbee35bd581385c8c2a8f66c7e1c8a2d5e32e48983d30d69e206ade5d12ad"}
{"level":"info","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fb6ee5305693e45b789d14b0ee61e9537365b8323f18e2919e496a2827a6e90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aebdd4492be46c28f49d6f028d2ae2373cfd06299b661a61ebe143c2171f5b6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:59:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:59:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aebdd4492be46c28f49d6f028d2ae2373cfd06299b661a61ebe143c2171f5b6b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fb6ee5305693e45b789d14b0ee61e9537365b8323f18e2919e496a2827a6e90"}
{"level":"info","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aebdd4492be46c28f49d6f028d2ae2373cfd06299b661a61ebe143c2171f5b6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea3dbee35bd581385c8c2a8f66c7e1c8a2d5e32e48983d30d69e206ade5d12ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:59:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:59:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea3dbee35bd581385c8c2a8f66c7e1c8a2d5e32e48983d30d69e206ade5d12ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aebdd4492be46c28f49d6f028d2ae2373cfd06299b661a61ebe143c2171f5b6b"}
{"level":"info","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea3dbee35bd581385c8c2a8f66c7e1c8a2d5e32e48983d30d69e206ade5d12ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fb6ee5305693e45b789d14b0ee61e9537365b8323f18e2919e496a2827a6e90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:59:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:59:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fb6ee5305693e45b789d14b0ee61e9537365b8323f18e2919e496a2827a6e90"}
{"level":"info","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aebdd4492be46c28f49d6f028d2ae2373cfd06299b661a61ebe143c2171f5b6b"}
{"level":"info","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fb6ee5305693e45b789d14b0ee61e9537365b8323f18e2919e496a2827a6e90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aebdd4492be46c28f49d6f028d2ae2373cfd06299b661a61ebe143c2171f5b6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea3dbee35bd581385c8c2a8f66c7e1c8a2d5e32e48983d30d69e206ade5d12ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:59:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:59:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea3dbee35bd581385c8c2a8f66c7e1c8a2d5e32e48983d30d69e206ade5d12ad"}
{"level":"info","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea3dbee35bd581385c8c2a8f66c7e1c8a2d5e32e48983d30d69e206ade5d12ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6fb6ee5305693e45b789d14b0ee61e9537365b8323f18e2919e496a2827a6e90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea3dbee35bd581385c8c2a8f66c7e1c8a2d5e32e48983d30d69e206ade5d12ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:59:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:59:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea3dbee35bd581385c8c2a8f66c7e1c8a2d5e32e48983d30d69e206ade5d12ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fb6ee5305693e45b789d14b0ee61e9537365b8323f18e2919e496a2827a6e90"}
{"level":"info","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea3dbee35bd581385c8c2a8f66c7e1c8a2d5e32e48983d30d69e206ade5d12ad"}
{"level":"info","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea3dbee35bd581385c8c2a8f66c7e1c8a2d5e32e48983d30d69e206ade5d12ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a42679631604bd9bcac712d09fb58008f3127df542578e906622e0b1d1d2c246","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:59:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:59:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a42679631604bd9bcac712d09fb58008f3127df542578e906622e0b1d1d2c246","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a42679631604bd9bcac712d09fb58008f3127df542578e906622e0b1d1d2c246"}
{"level":"debug","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fb6ee5305693e45b789d14b0ee61e9537365b8323f18e2919e496a2827a6e90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:59:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:59:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6fb6ee5305693e45b789d14b0ee61e9537365b8323f18e2919e496a2827a6e90"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea3dbee35bd581385c8c2a8f66c7e1c8a2d5e32e48983d30d69e206ade5d12ad"}
{"level":"info","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fb6ee5305693e45b789d14b0ee61e9537365b8323f18e2919e496a2827a6e90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4eec1144d9482d87a06bda5dbdd375f360e50d89b65f20cb727bfbc6593b9ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:59:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:59:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4eec1144d9482d87a06bda5dbdd375f360e50d89b65f20cb727bfbc6593b9ca"}
{"level":"info","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4eec1144d9482d87a06bda5dbdd375f360e50d89b65f20cb727bfbc6593b9ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea3dbee35bd581385c8c2a8f66c7e1c8a2d5e32e48983d30d69e206ade5d12ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a42679631604bd9bcac712d09fb58008f3127df542578e906622e0b1d1d2c246","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6fb6ee5305693e45b789d14b0ee61e9537365b8323f18e2919e496a2827a6e90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4eec1144d9482d87a06bda5dbdd375f360e50d89b65f20cb727bfbc6593b9ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:59:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:59:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b4eec1144d9482d87a06bda5dbdd375f360e50d89b65f20cb727bfbc6593b9ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a42679631604bd9bcac712d09fb58008f3127df542578e906622e0b1d1d2c246"}
{"level":"info","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4eec1144d9482d87a06bda5dbdd375f360e50d89b65f20cb727bfbc6593b9ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a42679631604bd9bcac712d09fb58008f3127df542578e906622e0b1d1d2c246","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:59:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:59:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a42679631604bd9bcac712d09fb58008f3127df542578e906622e0b1d1d2c246"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fb6ee5305693e45b789d14b0ee61e9537365b8323f18e2919e496a2827a6e90"}
{"level":"info","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a42679631604bd9bcac712d09fb58008f3127df542578e906622e0b1d1d2c246","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0d0292cfb35317228e003fcf41a3e385b2c53d69aa35922bdb4df311a3edb45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:59:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:59:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4eec1144d9482d87a06bda5dbdd375f360e50d89b65f20cb727bfbc6593b9ca"}
{"level":"info","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0d0292cfb35317228e003fcf41a3e385b2c53d69aa35922bdb4df311a3edb45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4eec1144d9482d87a06bda5dbdd375f360e50d89b65f20cb727bfbc6593b9ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"448ab29317cdf6a06bef2b199f6493f634200e3b9e364f7198fabb41b99880be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:59:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:59:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0d0292cfb35317228e003fcf41a3e385b2c53d69aa35922bdb4df311a3edb45"}
{"level":"info","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/448ab29317cdf6a06bef2b199f6493f634200e3b9e364f7198fabb41b99880be"}
{"level":"info","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"448ab29317cdf6a06bef2b199f6493f634200e3b9e364f7198fabb41b99880be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a42679631604bd9bcac712d09fb58008f3127df542578e906622e0b1d1d2c246","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:59:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:59:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a42679631604bd9bcac712d09fb58008f3127df542578e906622e0b1d1d2c246","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0d0292cfb35317228e003fcf41a3e385b2c53d69aa35922bdb4df311a3edb45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:59:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:59:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0d0292cfb35317228e003fcf41a3e385b2c53d69aa35922bdb4df311a3edb45"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0d0292cfb35317228e003fcf41a3e385b2c53d69aa35922bdb4df311a3edb45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"448ab29317cdf6a06bef2b199f6493f634200e3b9e364f7198fabb41b99880be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:59:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:59:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["448ab29317cdf6a06bef2b199f6493f634200e3b9e364f7198fabb41b99880be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a42679631604bd9bcac712d09fb58008f3127df542578e906622e0b1d1d2c246"}
{"level":"info","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"448ab29317cdf6a06bef2b199f6493f634200e3b9e364f7198fabb41b99880be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a42679631604bd9bcac712d09fb58008f3127df542578e906622e0b1d1d2c246","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:59:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:59:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a42679631604bd9bcac712d09fb58008f3127df542578e906622e0b1d1d2c246"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a42679631604bd9bcac712d09fb58008f3127df542578e906622e0b1d1d2c246","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0d0292cfb35317228e003fcf41a3e385b2c53d69aa35922bdb4df311a3edb45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:59:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:59:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0d0292cfb35317228e003fcf41a3e385b2c53d69aa35922bdb4df311a3edb45"}
{"level":"info","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0d0292cfb35317228e003fcf41a3e385b2c53d69aa35922bdb4df311a3edb45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"448ab29317cdf6a06bef2b199f6493f634200e3b9e364f7198fabb41b99880be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:59:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:59:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/448ab29317cdf6a06bef2b199f6493f634200e3b9e364f7198fabb41b99880be"}
{"level":"info","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"448ab29317cdf6a06bef2b199f6493f634200e3b9e364f7198fabb41b99880be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a42679631604bd9bcac712d09fb58008f3127df542578e906622e0b1d1d2c246","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:59:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:59:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a42679631604bd9bcac712d09fb58008f3127df542578e906622e0b1d1d2c246"}
{"level":"info","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a42679631604bd9bcac712d09fb58008f3127df542578e906622e0b1d1d2c246","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0d0292cfb35317228e003fcf41a3e385b2c53d69aa35922bdb4df311a3edb45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"448ab29317cdf6a06bef2b199f6493f634200e3b9e364f7198fabb41b99880be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:59:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:59:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["448ab29317cdf6a06bef2b199f6493f634200e3b9e364f7198fabb41b99880be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0d0292cfb35317228e003fcf41a3e385b2c53d69aa35922bdb4df311a3edb45"}
{"level":"info","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"448ab29317cdf6a06bef2b199f6493f634200e3b9e364f7198fabb41b99880be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a42679631604bd9bcac712d09fb58008f3127df542578e906622e0b1d1d2c246","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:59:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:59:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a42679631604bd9bcac712d09fb58008f3127df542578e906622e0b1d1d2c246"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/448ab29317cdf6a06bef2b199f6493f634200e3b9e364f7198fabb41b99880be"}
{"level":"info","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a42679631604bd9bcac712d09fb58008f3127df542578e906622e0b1d1d2c246","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0d0292cfb35317228e003fcf41a3e385b2c53d69aa35922bdb4df311a3edb45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:59:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:59:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0d0292cfb35317228e003fcf41a3e385b2c53d69aa35922bdb4df311a3edb45"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a42679631604bd9bcac712d09fb58008f3127df542578e906622e0b1d1d2c246"}
{"level":"info","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0d0292cfb35317228e003fcf41a3e385b2c53d69aa35922bdb4df311a3edb45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"448ab29317cdf6a06bef2b199f6493f634200e3b9e364f7198fabb41b99880be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:59:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:59:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/448ab29317cdf6a06bef2b199f6493f634200e3b9e364f7198fabb41b99880be"}
{"level":"info","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"448ab29317cdf6a06bef2b199f6493f634200e3b9e364f7198fabb41b99880be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a42679631604bd9bcac712d09fb58008f3127df542578e906622e0b1d1d2c246","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:59:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:59:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a42679631604bd9bcac712d09fb58008f3127df542578e906622e0b1d1d2c246"}
{"level":"info","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a42679631604bd9bcac712d09fb58008f3127df542578e906622e0b1d1d2c246","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0d0292cfb35317228e003fcf41a3e385b2c53d69aa35922bdb4df311a3edb45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:59:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:59:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0d0292cfb35317228e003fcf41a3e385b2c53d69aa35922bdb4df311a3edb45"}
{"level":"info","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0d0292cfb35317228e003fcf41a3e385b2c53d69aa35922bdb4df311a3edb45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"448ab29317cdf6a06bef2b199f6493f634200e3b9e364f7198fabb41b99880be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a42679631604bd9bcac712d09fb58008f3127df542578e906622e0b1d1d2c246","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:59:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:59:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a42679631604bd9bcac712d09fb58008f3127df542578e906622e0b1d1d2c246"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/448ab29317cdf6a06bef2b199f6493f634200e3b9e364f7198fabb41b99880be"}
{"level":"info","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a42679631604bd9bcac712d09fb58008f3127df542578e906622e0b1d1d2c246","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0d0292cfb35317228e003fcf41a3e385b2c53d69aa35922bdb4df311a3edb45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:59:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:59:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0d0292cfb35317228e003fcf41a3e385b2c53d69aa35922bdb4df311a3edb45"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a42679631604bd9bcac712d09fb58008f3127df542578e906622e0b1d1d2c246"}
{"level":"info","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0d0292cfb35317228e003fcf41a3e385b2c53d69aa35922bdb4df311a3edb45"}
{"level":"info","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0d0292cfb35317228e003fcf41a3e385b2c53d69aa35922bdb4df311a3edb45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"448ab29317cdf6a06bef2b199f6493f634200e3b9e364f7198fabb41b99880be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:59:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:59:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["448ab29317cdf6a06bef2b199f6493f634200e3b9e364f7198fabb41b99880be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a42679631604bd9bcac712d09fb58008f3127df542578e906622e0b1d1d2c246"}
{"level":"info","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0d0292cfb35317228e003fcf41a3e385b2c53d69aa35922bdb4df311a3edb45"}
{"level":"info","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"448ab29317cdf6a06bef2b199f6493f634200e3b9e364f7198fabb41b99880be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a42679631604bd9bcac712d09fb58008f3127df542578e906622e0b1d1d2c246","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0d0292cfb35317228e003fcf41a3e385b2c53d69aa35922bdb4df311a3edb45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"448ab29317cdf6a06bef2b199f6493f634200e3b9e364f7198fabb41b99880be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:59:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:59:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/448ab29317cdf6a06bef2b199f6493f634200e3b9e364f7198fabb41b99880be"}
{"level":"info","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"448ab29317cdf6a06bef2b199f6493f634200e3b9e364f7198fabb41b99880be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"448ab29317cdf6a06bef2b199f6493f634200e3b9e364f7198fabb41b99880be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"448ab29317cdf6a06bef2b199f6493f634200e3b9e364f7198fabb41b99880be","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/448ab29317cdf6a06bef2b199f6493f634200e3b9e364f7198fabb41b99880be"}
{"level":"debug","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"448ab29317cdf6a06bef2b199f6493f634200e3b9e364f7198fabb41b99880be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:59:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:59:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["448ab29317cdf6a06bef2b199f6493f634200e3b9e364f7198fabb41b99880be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"448ab29317cdf6a06bef2b199f6493f634200e3b9e364f7198fabb41b99880be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"448ab29317cdf6a06bef2b199f6493f634200e3b9e364f7198fabb41b99880be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:59:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:59:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/448ab29317cdf6a06bef2b199f6493f634200e3b9e364f7198fabb41b99880be"}
{"level":"info","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"448ab29317cdf6a06bef2b199f6493f634200e3b9e364f7198fabb41b99880be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"448ab29317cdf6a06bef2b199f6493f634200e3b9e364f7198fabb41b99880be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:59:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:59:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["448ab29317cdf6a06bef2b199f6493f634200e3b9e364f7198fabb41b99880be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/448ab29317cdf6a06bef2b199f6493f634200e3b9e364f7198fabb41b99880be"}
{"level":"info","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"448ab29317cdf6a06bef2b199f6493f634200e3b9e364f7198fabb41b99880be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"448ab29317cdf6a06bef2b199f6493f634200e3b9e364f7198fabb41b99880be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:59:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:59:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["448ab29317cdf6a06bef2b199f6493f634200e3b9e364f7198fabb41b99880be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/448ab29317cdf6a06bef2b199f6493f634200e3b9e364f7198fabb41b99880be"}
{"level":"error","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"448ab29317cdf6a06bef2b199f6493f634200e3b9e364f7198fabb41b99880be","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"448ab29317cdf6a06bef2b199f6493f634200e3b9e364f7198fabb41b99880be\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"448ab29317cdf6a06bef2b199f6493f634200e3b9e364f7198fabb41b99880be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"448ab29317cdf6a06bef2b199f6493f634200e3b9e364f7198fabb41b99880be","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:59:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"72be422b-b1c1-4311-9ace-7eb7e16da94e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:56236","PortSpecifier":{"PortValue":56236}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"72be422b-b1c1-4311-9ace-7eb7e16da94e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8269b5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T16:59:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"72be422b-b1c1-4311-9ace-7eb7e16da94e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:56236","PortSpecifier":{"PortValue":56236}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784134756,"nanos":731956517},"http":{"id":"72be422b-b1c1-4311-9ace-7eb7e16da94e","method":"POST","headers":{":authority":"e2e-shared-a-8269b5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:59:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"72be422b-b1c1-4311-9ace-7eb7e16da94e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T16:59:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"72be422b-b1c1-4311-9ace-7eb7e16da94e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2ffacb13-a3e0-46bc-98fe-52df4fec3861","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cb7ac727-7271-4758-b198-c4e61e072694"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2eae08074477"]}}
{"level":"debug","ts":"2026-07-15T16:59:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"72be422b-b1c1-4311-9ace-7eb7e16da94e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2eae08074477"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cb7ac727-7271-4758-b198-c4e61e072694"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2ffacb13-a3e0-46bc-98fe-52df4fec3861","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"091d01fc5bc6383a86d3f7d558c101e42d446b68ab6028635e10cb80a1788a0d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8269b5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:59:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72be422b-b1c1-4311-9ace-7eb7e16da94e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:59:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72be422b-b1c1-4311-9ace-7eb7e16da94e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:59:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72be422b-b1c1-4311-9ace-7eb7e16da94e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8269b5/auth-test-model-8269b5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8269b5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:59:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"72be422b-b1c1-4311-9ace-7eb7e16da94e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T16:59:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"72be422b-b1c1-4311-9ace-7eb7e16da94e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T16:59:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"72be422b-b1c1-4311-9ace-7eb7e16da94e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T16:59:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"72be422b-b1c1-4311-9ace-7eb7e16da94e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T16:59:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"72be422b-b1c1-4311-9ace-7eb7e16da94e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T16:59:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d6bbe3ae-1f21-46b5-9744-0e53260bf946","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:59894","PortSpecifier":{"PortValue":59894}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d6bbe3ae-1f21-46b5-9744-0e53260bf946","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-021cd5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T16:59:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d6bbe3ae-1f21-46b5-9744-0e53260bf946","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:59894","PortSpecifier":{"PortValue":59894}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784134756,"nanos":798756677},"http":{"id":"d6bbe3ae-1f21-46b5-9744-0e53260bf946","method":"POST","headers":{":authority":"e2e-shared-b-021cd5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:59:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d6bbe3ae-1f21-46b5-9744-0e53260bf946","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T16:59:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d6bbe3ae-1f21-46b5-9744-0e53260bf946","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2ffacb13-a3e0-46bc-98fe-52df4fec3861","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cb7ac727-7271-4758-b198-c4e61e072694"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2eae08074477"]}}
{"level":"debug","ts":"2026-07-15T16:59:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d6bbe3ae-1f21-46b5-9744-0e53260bf946","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2eae08074477"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cb7ac727-7271-4758-b198-c4e61e072694"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2ffacb13-a3e0-46bc-98fe-52df4fec3861","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e9006bcd64adf2438e9d026356dd007d07411c3b54a067d90bbada1f2285442d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-021cd5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:59:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d6bbe3ae-1f21-46b5-9744-0e53260bf946","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:59:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d6bbe3ae-1f21-46b5-9744-0e53260bf946","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:59:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d6bbe3ae-1f21-46b5-9744-0e53260bf946","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-021cd5/auth-test-model-021cd5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-021cd5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:59:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d6bbe3ae-1f21-46b5-9744-0e53260bf946","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T16:59:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d6bbe3ae-1f21-46b5-9744-0e53260bf946","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T16:59:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d6bbe3ae-1f21-46b5-9744-0e53260bf946","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T16:59:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d6bbe3ae-1f21-46b5-9744-0e53260bf946","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T16:59:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d6bbe3ae-1f21-46b5-9744-0e53260bf946","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T16:59:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"237e5352-8365-4a70-96a6-a251877dc601","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:56240","PortSpecifier":{"PortValue":56240}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"237e5352-8365-4a70-96a6-a251877dc601","method":"GET","path":"/maas-api/v1/api-keys/be16489d-b4ea-4b77-be39-86ea66ad9f10","host":"e2e-shared-a-8269b5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T16:59:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"237e5352-8365-4a70-96a6-a251877dc601","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:56240","PortSpecifier":{"PortValue":56240}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784134756,"nanos":858582977},"http":{"id":"237e5352-8365-4a70-96a6-a251877dc601","method":"GET","headers":{":authority":"e2e-shared-a-8269b5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/be16489d-b4ea-4b77-be39-86ea66ad9f10",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:59:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"237e5352-8365-4a70-96a6-a251877dc601","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T16:59:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"237e5352-8365-4a70-96a6-a251877dc601","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2ffacb13-a3e0-46bc-98fe-52df4fec3861","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cb7ac727-7271-4758-b198-c4e61e072694"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2eae08074477"]}}
{"level":"debug","ts":"2026-07-15T16:59:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"237e5352-8365-4a70-96a6-a251877dc601","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2eae08074477"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cb7ac727-7271-4758-b198-c4e61e072694"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2ffacb13-a3e0-46bc-98fe-52df4fec3861","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"091d01fc5bc6383a86d3f7d558c101e42d446b68ab6028635e10cb80a1788a0d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8269b5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/be16489d-b4ea-4b77-be39-86ea66ad9f10",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:59:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"237e5352-8365-4a70-96a6-a251877dc601","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:59:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"237e5352-8365-4a70-96a6-a251877dc601","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:59:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"237e5352-8365-4a70-96a6-a251877dc601","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8269b5/auth-test-model-8269b5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8269b5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:59:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"237e5352-8365-4a70-96a6-a251877dc601","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T16:59:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"237e5352-8365-4a70-96a6-a251877dc601","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T16:59:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"237e5352-8365-4a70-96a6-a251877dc601","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T16:59:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"237e5352-8365-4a70-96a6-a251877dc601","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T16:59:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"237e5352-8365-4a70-96a6-a251877dc601","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T16:59:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2c06aaba-2387-4ba1-b1b7-be83c112b48d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:59900","PortSpecifier":{"PortValue":59900}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2c06aaba-2387-4ba1-b1b7-be83c112b48d","method":"GET","path":"/maas-api/v1/api-keys/1e7d1c33-ee11-4a5a-abda-c4e9f7050b2c","host":"e2e-shared-b-021cd5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T16:59:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2c06aaba-2387-4ba1-b1b7-be83c112b48d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:59900","PortSpecifier":{"PortValue":59900}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784134756,"nanos":896337605},"http":{"id":"2c06aaba-2387-4ba1-b1b7-be83c112b48d","method":"GET","headers":{":authority":"e2e-shared-b-021cd5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/1e7d1c33-ee11-4a5a-abda-c4e9f7050b2c",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:59:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2c06aaba-2387-4ba1-b1b7-be83c112b48d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T16:59:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2c06aaba-2387-4ba1-b1b7-be83c112b48d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2ffacb13-a3e0-46bc-98fe-52df4fec3861","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cb7ac727-7271-4758-b198-c4e61e072694"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2eae08074477"]}}
{"level":"debug","ts":"2026-07-15T16:59:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2c06aaba-2387-4ba1-b1b7-be83c112b48d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2eae08074477"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cb7ac727-7271-4758-b198-c4e61e072694"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2ffacb13-a3e0-46bc-98fe-52df4fec3861","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e9006bcd64adf2438e9d026356dd007d07411c3b54a067d90bbada1f2285442d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-021cd5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/1e7d1c33-ee11-4a5a-abda-c4e9f7050b2c",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:59:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2c06aaba-2387-4ba1-b1b7-be83c112b48d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:59:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2c06aaba-2387-4ba1-b1b7-be83c112b48d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:59:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2c06aaba-2387-4ba1-b1b7-be83c112b48d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-021cd5/auth-test-model-021cd5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-021cd5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:59:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2c06aaba-2387-4ba1-b1b7-be83c112b48d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T16:59:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2c06aaba-2387-4ba1-b1b7-be83c112b48d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T16:59:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2c06aaba-2387-4ba1-b1b7-be83c112b48d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T16:59:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2c06aaba-2387-4ba1-b1b7-be83c112b48d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T16:59:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2c06aaba-2387-4ba1-b1b7-be83c112b48d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T16:59:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9a27be86-c012-471a-a9de-cd3b6a3039bd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:58568","PortSpecifier":{"PortValue":58568}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9a27be86-c012-471a-a9de-cd3b6a3039bd","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8269b5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T16:59:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9a27be86-c012-471a-a9de-cd3b6a3039bd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:58568","PortSpecifier":{"PortValue":58568}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784134774,"nanos":344369812},"http":{"id":"9a27be86-c012-471a-a9de-cd3b6a3039bd","method":"POST","headers":{":authority":"e2e-shared-a-8269b5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:59:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9a27be86-c012-471a-a9de-cd3b6a3039bd","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T16:59:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9a27be86-c012-471a-a9de-cd3b6a3039bd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2ffacb13-a3e0-46bc-98fe-52df4fec3861","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cb7ac727-7271-4758-b198-c4e61e072694"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2eae08074477"]}}
{"level":"debug","ts":"2026-07-15T16:59:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9a27be86-c012-471a-a9de-cd3b6a3039bd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2eae08074477"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cb7ac727-7271-4758-b198-c4e61e072694"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2ffacb13-a3e0-46bc-98fe-52df4fec3861","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"091d01fc5bc6383a86d3f7d558c101e42d446b68ab6028635e10cb80a1788a0d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8269b5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:59:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a27be86-c012-471a-a9de-cd3b6a3039bd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:59:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a27be86-c012-471a-a9de-cd3b6a3039bd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:59:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a27be86-c012-471a-a9de-cd3b6a3039bd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8269b5/auth-test-model-8269b5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8269b5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:59:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9a27be86-c012-471a-a9de-cd3b6a3039bd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T16:59:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a27be86-c012-471a-a9de-cd3b6a3039bd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T16:59:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a27be86-c012-471a-a9de-cd3b6a3039bd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T16:59:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9a27be86-c012-471a-a9de-cd3b6a3039bd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T16:59:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9a27be86-c012-471a-a9de-cd3b6a3039bd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T16:59:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"85c5d42e-3a40-496f-b64f-65868d4246a2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:46106","PortSpecifier":{"PortValue":46106}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"85c5d42e-3a40-496f-b64f-65868d4246a2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-021cd5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T16:59:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"85c5d42e-3a40-496f-b64f-65868d4246a2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:46106","PortSpecifier":{"PortValue":46106}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784134774,"nanos":389493039},"http":{"id":"85c5d42e-3a40-496f-b64f-65868d4246a2","method":"POST","headers":{":authority":"e2e-shared-b-021cd5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:59:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"85c5d42e-3a40-496f-b64f-65868d4246a2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T16:59:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"85c5d42e-3a40-496f-b64f-65868d4246a2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2ffacb13-a3e0-46bc-98fe-52df4fec3861","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cb7ac727-7271-4758-b198-c4e61e072694"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2eae08074477"]}}
{"level":"debug","ts":"2026-07-15T16:59:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"85c5d42e-3a40-496f-b64f-65868d4246a2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2eae08074477"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cb7ac727-7271-4758-b198-c4e61e072694"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2ffacb13-a3e0-46bc-98fe-52df4fec3861","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e9006bcd64adf2438e9d026356dd007d07411c3b54a067d90bbada1f2285442d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-021cd5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:59:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"85c5d42e-3a40-496f-b64f-65868d4246a2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:59:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"85c5d42e-3a40-496f-b64f-65868d4246a2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:59:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"85c5d42e-3a40-496f-b64f-65868d4246a2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-021cd5/auth-test-model-021cd5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-021cd5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:59:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"85c5d42e-3a40-496f-b64f-65868d4246a2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T16:59:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"85c5d42e-3a40-496f-b64f-65868d4246a2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T16:59:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"85c5d42e-3a40-496f-b64f-65868d4246a2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T16:59:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"85c5d42e-3a40-496f-b64f-65868d4246a2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T16:59:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"85c5d42e-3a40-496f-b64f-65868d4246a2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T16:59:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dc8aacad-7520-4028-a954-386d87075adf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:58576","PortSpecifier":{"PortValue":58576}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dc8aacad-7520-4028-a954-386d87075adf","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-8269b5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T16:59:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dc8aacad-7520-4028-a954-386d87075adf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:58576","PortSpecifier":{"PortValue":58576}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784134774,"nanos":433552446},"http":{"id":"dc8aacad-7520-4028-a954-386d87075adf","method":"GET","headers":{":authority":"e2e-shared-a-8269b5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:59:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dc8aacad-7520-4028-a954-386d87075adf","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-3yxariX1XGklfY7D_6rggDz3EnxmQFL3pl5Wuc934YtRVbO40LWuRP1QKQvY"}
{"level":"debug","ts":"2026-07-15T16:59:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dc8aacad-7520-4028-a954-386d87075adf","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8269b5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-3yxariX1XGklfY7D_6rggDz3EnxmQFL3pl5Wuc934YtRVbO40LWuRP1QKQvY\"}"}
{"level":"debug","ts":"2026-07-15T16:59:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dc8aacad-7520-4028-a954-386d87075adf","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8269b5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"90b4d598-d6f7-4778-a4bd-65e80175200f","keyName":"e2e-auth-iso-a-7fb12c","subscription":"e2e-auth-iso-407bf5","tenant":"e2e-shared-a-8269b5","userId":"90b4d598-d6f7-4778-a4bd-65e80175200f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T16:59:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dc8aacad-7520-4028-a954-386d87075adf","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:59:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc8aacad-7520-4028-a954-386d87075adf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:59:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc8aacad-7520-4028-a954-386d87075adf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:59:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc8aacad-7520-4028-a954-386d87075adf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8269b5/auth-test-model-8269b5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8269b5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:59:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"dc8aacad-7520-4028-a954-386d87075adf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-15T16:59:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dc8aacad-7520-4028-a954-386d87075adf","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T16:59:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dc8aacad-7520-4028-a954-386d87075adf","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T16:59:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dc8aacad-7520-4028-a954-386d87075adf","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-407bf5"}
{"level":"info","ts":"2026-07-15T16:59:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dc8aacad-7520-4028-a954-386d87075adf","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T16:59:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dc8aacad-7520-4028-a954-386d87075adf","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T16:59:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"de2ce1ef-a6c9-473c-97c0-cf07a53eade1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:42876","PortSpecifier":{"PortValue":42876}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"de2ce1ef-a6c9-473c-97c0-cf07a53eade1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8269b5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T16:59:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"de2ce1ef-a6c9-473c-97c0-cf07a53eade1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:42876","PortSpecifier":{"PortValue":42876}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784134789,"nanos":718260279},"http":{"id":"de2ce1ef-a6c9-473c-97c0-cf07a53eade1","method":"POST","headers":{":authority":"e2e-shared-a-8269b5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:59:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"de2ce1ef-a6c9-473c-97c0-cf07a53eade1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T16:59:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"de2ce1ef-a6c9-473c-97c0-cf07a53eade1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2ffacb13-a3e0-46bc-98fe-52df4fec3861","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cb7ac727-7271-4758-b198-c4e61e072694"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2eae08074477"]}}
{"level":"debug","ts":"2026-07-15T16:59:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"de2ce1ef-a6c9-473c-97c0-cf07a53eade1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2eae08074477"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cb7ac727-7271-4758-b198-c4e61e072694"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2ffacb13-a3e0-46bc-98fe-52df4fec3861","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"091d01fc5bc6383a86d3f7d558c101e42d446b68ab6028635e10cb80a1788a0d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8269b5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:59:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"de2ce1ef-a6c9-473c-97c0-cf07a53eade1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:59:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"de2ce1ef-a6c9-473c-97c0-cf07a53eade1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:59:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"de2ce1ef-a6c9-473c-97c0-cf07a53eade1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8269b5/auth-test-model-8269b5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8269b5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:59:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"de2ce1ef-a6c9-473c-97c0-cf07a53eade1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T16:59:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"de2ce1ef-a6c9-473c-97c0-cf07a53eade1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T16:59:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"de2ce1ef-a6c9-473c-97c0-cf07a53eade1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T16:59:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"de2ce1ef-a6c9-473c-97c0-cf07a53eade1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T16:59:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"de2ce1ef-a6c9-473c-97c0-cf07a53eade1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T16:59:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"507d7966-344e-467d-b7e0-9ae4040678b5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:58508","PortSpecifier":{"PortValue":58508}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"507d7966-344e-467d-b7e0-9ae4040678b5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-021cd5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T16:59:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"507d7966-344e-467d-b7e0-9ae4040678b5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:58508","PortSpecifier":{"PortValue":58508}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784134789,"nanos":756447880},"http":{"id":"507d7966-344e-467d-b7e0-9ae4040678b5","method":"POST","headers":{":authority":"e2e-shared-b-021cd5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:59:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"507d7966-344e-467d-b7e0-9ae4040678b5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T16:59:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"507d7966-344e-467d-b7e0-9ae4040678b5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2ffacb13-a3e0-46bc-98fe-52df4fec3861","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cb7ac727-7271-4758-b198-c4e61e072694"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2eae08074477"]}}
{"level":"debug","ts":"2026-07-15T16:59:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"507d7966-344e-467d-b7e0-9ae4040678b5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2eae08074477"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cb7ac727-7271-4758-b198-c4e61e072694"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2ffacb13-a3e0-46bc-98fe-52df4fec3861","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e9006bcd64adf2438e9d026356dd007d07411c3b54a067d90bbada1f2285442d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-021cd5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:59:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"507d7966-344e-467d-b7e0-9ae4040678b5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:59:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"507d7966-344e-467d-b7e0-9ae4040678b5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:59:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"507d7966-344e-467d-b7e0-9ae4040678b5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-021cd5/auth-test-model-021cd5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-021cd5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:59:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"507d7966-344e-467d-b7e0-9ae4040678b5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T16:59:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"507d7966-344e-467d-b7e0-9ae4040678b5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T16:59:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"507d7966-344e-467d-b7e0-9ae4040678b5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T16:59:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"507d7966-344e-467d-b7e0-9ae4040678b5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T16:59:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"507d7966-344e-467d-b7e0-9ae4040678b5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T16:59:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b6222f14-6148-4627-936d-cd81fdfc71c2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:58524","PortSpecifier":{"PortValue":58524}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b6222f14-6148-4627-936d-cd81fdfc71c2","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-021cd5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T16:59:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b6222f14-6148-4627-936d-cd81fdfc71c2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:58524","PortSpecifier":{"PortValue":58524}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784134789,"nanos":794827640},"http":{"id":"b6222f14-6148-4627-936d-cd81fdfc71c2","method":"GET","headers":{":authority":"e2e-shared-b-021cd5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:59:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b6222f14-6148-4627-936d-cd81fdfc71c2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1IHUXRzdTwT1uPRA1_q3rMwlgJzCWmCNpMCyQBSJvs7z8eWPqVX5V4LPsUerD"}
{"level":"debug","ts":"2026-07-15T16:59:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b6222f14-6148-4627-936d-cd81fdfc71c2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-021cd5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1IHUXRzdTwT1uPRA1_q3rMwlgJzCWmCNpMCyQBSJvs7z8eWPqVX5V4LPsUerD\"}"}
{"level":"debug","ts":"2026-07-15T16:59:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b6222f14-6148-4627-936d-cd81fdfc71c2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-021cd5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-15T16:59:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b6222f14-6148-4627-936d-cd81fdfc71c2","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"e9006bcd64adf2438e9d026356dd007d07411c3b54a067d90bbada1f2285442d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-021cd5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:59:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b6222f14-6148-4627-936d-cd81fdfc71c2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:59:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"b6222f14-6148-4627-936d-cd81fdfc71c2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-15T16:59:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b6222f14-6148-4627-936d-cd81fdfc71c2","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-15T16:59:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b6222f14-6148-4627-936d-cd81fdfc71c2","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-15T17:00:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0db4801e-1d73-4305-8bb8-1e53a924cce8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:44280","PortSpecifier":{"PortValue":44280}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0db4801e-1d73-4305-8bb8-1e53a924cce8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8269b5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T17:00:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0db4801e-1d73-4305-8bb8-1e53a924cce8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:44280","PortSpecifier":{"PortValue":44280}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784134805,"nanos":161826750},"http":{"id":"0db4801e-1d73-4305-8bb8-1e53a924cce8","method":"POST","headers":{":authority":"e2e-shared-a-8269b5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:00:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0db4801e-1d73-4305-8bb8-1e53a924cce8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T17:00:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0db4801e-1d73-4305-8bb8-1e53a924cce8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2ffacb13-a3e0-46bc-98fe-52df4fec3861","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cb7ac727-7271-4758-b198-c4e61e072694"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2eae08074477"]}}
{"level":"debug","ts":"2026-07-15T17:00:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0db4801e-1d73-4305-8bb8-1e53a924cce8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2eae08074477"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cb7ac727-7271-4758-b198-c4e61e072694"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2ffacb13-a3e0-46bc-98fe-52df4fec3861","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"091d01fc5bc6383a86d3f7d558c101e42d446b68ab6028635e10cb80a1788a0d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8269b5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:00:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0db4801e-1d73-4305-8bb8-1e53a924cce8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:00:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0db4801e-1d73-4305-8bb8-1e53a924cce8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:00:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0db4801e-1d73-4305-8bb8-1e53a924cce8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8269b5/auth-test-model-8269b5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8269b5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:00:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0db4801e-1d73-4305-8bb8-1e53a924cce8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T17:00:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0db4801e-1d73-4305-8bb8-1e53a924cce8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T17:00:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0db4801e-1d73-4305-8bb8-1e53a924cce8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-15T17:00:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0db4801e-1d73-4305-8bb8-1e53a924cce8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T17:00:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0db4801e-1d73-4305-8bb8-1e53a924cce8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T17:00:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5ba5469a-09c0-4947-979a-67ee0b064bb4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:57780","PortSpecifier":{"PortValue":57780}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5ba5469a-09c0-4947-979a-67ee0b064bb4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-021cd5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T17:00:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5ba5469a-09c0-4947-979a-67ee0b064bb4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:57780","PortSpecifier":{"PortValue":57780}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784134805,"nanos":210937186},"http":{"id":"5ba5469a-09c0-4947-979a-67ee0b064bb4","method":"POST","headers":{":authority":"e2e-shared-b-021cd5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:00:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5ba5469a-09c0-4947-979a-67ee0b064bb4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T17:00:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5ba5469a-09c0-4947-979a-67ee0b064bb4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2ffacb13-a3e0-46bc-98fe-52df4fec3861","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cb7ac727-7271-4758-b198-c4e61e072694"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2eae08074477"]}}
{"level":"debug","ts":"2026-07-15T17:00:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5ba5469a-09c0-4947-979a-67ee0b064bb4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2eae08074477"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cb7ac727-7271-4758-b198-c4e61e072694"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2ffacb13-a3e0-46bc-98fe-52df4fec3861","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e9006bcd64adf2438e9d026356dd007d07411c3b54a067d90bbada1f2285442d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-021cd5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:00:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ba5469a-09c0-4947-979a-67ee0b064bb4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:00:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ba5469a-09c0-4947-979a-67ee0b064bb4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:00:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ba5469a-09c0-4947-979a-67ee0b064bb4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-021cd5/auth-test-model-021cd5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-021cd5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:00:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5ba5469a-09c0-4947-979a-67ee0b064bb4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T17:00:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ba5469a-09c0-4947-979a-67ee0b064bb4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T17:00:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ba5469a-09c0-4947-979a-67ee0b064bb4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T17:00:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5ba5469a-09c0-4947-979a-67ee0b064bb4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T17:00:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5ba5469a-09c0-4947-979a-67ee0b064bb4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T17:00:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"258a61bd-2c07-49bb-affc-76e208143397","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:44284","PortSpecifier":{"PortValue":44284}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"258a61bd-2c07-49bb-affc-76e208143397","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-8269b5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T17:00:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"258a61bd-2c07-49bb-affc-76e208143397","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:44284","PortSpecifier":{"PortValue":44284}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784134805,"nanos":253543325},"http":{"id":"258a61bd-2c07-49bb-affc-76e208143397","method":"POST","headers":{":authority":"e2e-shared-a-8269b5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:00:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"258a61bd-2c07-49bb-affc-76e208143397","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T17:00:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"258a61bd-2c07-49bb-affc-76e208143397","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2ffacb13-a3e0-46bc-98fe-52df4fec3861","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cb7ac727-7271-4758-b198-c4e61e072694"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2eae08074477"]}}
{"level":"debug","ts":"2026-07-15T17:00:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"258a61bd-2c07-49bb-affc-76e208143397","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2eae08074477"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cb7ac727-7271-4758-b198-c4e61e072694"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2ffacb13-a3e0-46bc-98fe-52df4fec3861","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"091d01fc5bc6383a86d3f7d558c101e42d446b68ab6028635e10cb80a1788a0d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8269b5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:00:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"258a61bd-2c07-49bb-affc-76e208143397","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:00:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"258a61bd-2c07-49bb-affc-76e208143397","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:00:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"258a61bd-2c07-49bb-affc-76e208143397","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8269b5/auth-test-model-8269b5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8269b5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:00:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"258a61bd-2c07-49bb-affc-76e208143397","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T17:00:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"258a61bd-2c07-49bb-affc-76e208143397","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T17:00:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"258a61bd-2c07-49bb-affc-76e208143397","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-15T17:00:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"258a61bd-2c07-49bb-affc-76e208143397","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T17:00:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"258a61bd-2c07-49bb-affc-76e208143397","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T17:00:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"02344620-3dda-4617-9903-814c07b00fe9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:57784","PortSpecifier":{"PortValue":57784}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"02344620-3dda-4617-9903-814c07b00fe9","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-021cd5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T17:00:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"02344620-3dda-4617-9903-814c07b00fe9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:57784","PortSpecifier":{"PortValue":57784}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784134805,"nanos":301489211},"http":{"id":"02344620-3dda-4617-9903-814c07b00fe9","method":"POST","headers":{":authority":"e2e-shared-b-021cd5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:00:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"02344620-3dda-4617-9903-814c07b00fe9","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T17:00:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"02344620-3dda-4617-9903-814c07b00fe9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2ffacb13-a3e0-46bc-98fe-52df4fec3861","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cb7ac727-7271-4758-b198-c4e61e072694"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2eae08074477"]}}
{"level":"debug","ts":"2026-07-15T17:00:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"02344620-3dda-4617-9903-814c07b00fe9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2eae08074477"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cb7ac727-7271-4758-b198-c4e61e072694"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2ffacb13-a3e0-46bc-98fe-52df4fec3861","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e9006bcd64adf2438e9d026356dd007d07411c3b54a067d90bbada1f2285442d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-021cd5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:00:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"02344620-3dda-4617-9903-814c07b00fe9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:00:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"02344620-3dda-4617-9903-814c07b00fe9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:00:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"02344620-3dda-4617-9903-814c07b00fe9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-021cd5/auth-test-model-021cd5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-021cd5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:00:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"02344620-3dda-4617-9903-814c07b00fe9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T17:00:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"02344620-3dda-4617-9903-814c07b00fe9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T17:00:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"02344620-3dda-4617-9903-814c07b00fe9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T17:00:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"02344620-3dda-4617-9903-814c07b00fe9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T17:00:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"02344620-3dda-4617-9903-814c07b00fe9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T17:00:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dbb8dac6-2f91-46ab-a4cc-25d37f1f801d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:42836","PortSpecifier":{"PortValue":42836}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dbb8dac6-2f91-46ab-a4cc-25d37f1f801d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8269b5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T17:00:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dbb8dac6-2f91-46ab-a4cc-25d37f1f801d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:42836","PortSpecifier":{"PortValue":42836}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784134825,"nanos":96058314},"http":{"id":"dbb8dac6-2f91-46ab-a4cc-25d37f1f801d","method":"POST","headers":{":authority":"e2e-shared-a-8269b5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:00:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"dbb8dac6-2f91-46ab-a4cc-25d37f1f801d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T17:00:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dbb8dac6-2f91-46ab-a4cc-25d37f1f801d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2ffacb13-a3e0-46bc-98fe-52df4fec3861","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cb7ac727-7271-4758-b198-c4e61e072694"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2eae08074477"]}}
{"level":"debug","ts":"2026-07-15T17:00:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dbb8dac6-2f91-46ab-a4cc-25d37f1f801d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2eae08074477"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cb7ac727-7271-4758-b198-c4e61e072694"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2ffacb13-a3e0-46bc-98fe-52df4fec3861","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"091d01fc5bc6383a86d3f7d558c101e42d446b68ab6028635e10cb80a1788a0d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8269b5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:00:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dbb8dac6-2f91-46ab-a4cc-25d37f1f801d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:00:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dbb8dac6-2f91-46ab-a4cc-25d37f1f801d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:00:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dbb8dac6-2f91-46ab-a4cc-25d37f1f801d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8269b5/auth-test-model-8269b5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8269b5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:00:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"dbb8dac6-2f91-46ab-a4cc-25d37f1f801d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T17:00:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dbb8dac6-2f91-46ab-a4cc-25d37f1f801d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T17:00:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dbb8dac6-2f91-46ab-a4cc-25d37f1f801d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T17:00:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dbb8dac6-2f91-46ab-a4cc-25d37f1f801d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T17:00:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dbb8dac6-2f91-46ab-a4cc-25d37f1f801d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T17:00:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3fa1c967-3cc3-4e1c-8fad-8256ffd99eb4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:51096","PortSpecifier":{"PortValue":51096}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3fa1c967-3cc3-4e1c-8fad-8256ffd99eb4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-021cd5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T17:00:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3fa1c967-3cc3-4e1c-8fad-8256ffd99eb4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:51096","PortSpecifier":{"PortValue":51096}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784134825,"nanos":137955593},"http":{"id":"3fa1c967-3cc3-4e1c-8fad-8256ffd99eb4","method":"POST","headers":{":authority":"e2e-shared-b-021cd5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:00:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3fa1c967-3cc3-4e1c-8fad-8256ffd99eb4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T17:00:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3fa1c967-3cc3-4e1c-8fad-8256ffd99eb4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2ffacb13-a3e0-46bc-98fe-52df4fec3861","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cb7ac727-7271-4758-b198-c4e61e072694"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2eae08074477"]}}
{"level":"debug","ts":"2026-07-15T17:00:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3fa1c967-3cc3-4e1c-8fad-8256ffd99eb4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2eae08074477"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cb7ac727-7271-4758-b198-c4e61e072694"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2ffacb13-a3e0-46bc-98fe-52df4fec3861","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e9006bcd64adf2438e9d026356dd007d07411c3b54a067d90bbada1f2285442d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-021cd5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:00:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3fa1c967-3cc3-4e1c-8fad-8256ffd99eb4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:00:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3fa1c967-3cc3-4e1c-8fad-8256ffd99eb4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:00:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3fa1c967-3cc3-4e1c-8fad-8256ffd99eb4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-021cd5/auth-test-model-021cd5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-021cd5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:00:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3fa1c967-3cc3-4e1c-8fad-8256ffd99eb4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T17:00:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3fa1c967-3cc3-4e1c-8fad-8256ffd99eb4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T17:00:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3fa1c967-3cc3-4e1c-8fad-8256ffd99eb4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T17:00:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3fa1c967-3cc3-4e1c-8fad-8256ffd99eb4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T17:00:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3fa1c967-3cc3-4e1c-8fad-8256ffd99eb4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T17:00:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"50a9ec6f-9fd7-4220-9efa-091b6ca4fbf2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:51108","PortSpecifier":{"PortValue":51108}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"50a9ec6f-9fd7-4220-9efa-091b6ca4fbf2","method":"GET","path":"/maas-api/v1/api-keys/b8b3727b-4c93-438a-bf40-468a00c4a08a","host":"e2e-shared-b-021cd5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T17:00:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"50a9ec6f-9fd7-4220-9efa-091b6ca4fbf2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:51108","PortSpecifier":{"PortValue":51108}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784134825,"nanos":172138778},"http":{"id":"50a9ec6f-9fd7-4220-9efa-091b6ca4fbf2","method":"GET","headers":{":authority":"e2e-shared-b-021cd5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/b8b3727b-4c93-438a-bf40-468a00c4a08a",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:00:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"50a9ec6f-9fd7-4220-9efa-091b6ca4fbf2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T17:00:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"50a9ec6f-9fd7-4220-9efa-091b6ca4fbf2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2ffacb13-a3e0-46bc-98fe-52df4fec3861","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cb7ac727-7271-4758-b198-c4e61e072694"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2eae08074477"]}}
{"level":"debug","ts":"2026-07-15T17:00:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"50a9ec6f-9fd7-4220-9efa-091b6ca4fbf2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2eae08074477"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cb7ac727-7271-4758-b198-c4e61e072694"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2ffacb13-a3e0-46bc-98fe-52df4fec3861","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e9006bcd64adf2438e9d026356dd007d07411c3b54a067d90bbada1f2285442d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-021cd5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/b8b3727b-4c93-438a-bf40-468a00c4a08a",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:00:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50a9ec6f-9fd7-4220-9efa-091b6ca4fbf2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:00:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50a9ec6f-9fd7-4220-9efa-091b6ca4fbf2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:00:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50a9ec6f-9fd7-4220-9efa-091b6ca4fbf2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-021cd5/auth-test-model-021cd5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-021cd5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:00:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"50a9ec6f-9fd7-4220-9efa-091b6ca4fbf2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T17:00:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"50a9ec6f-9fd7-4220-9efa-091b6ca4fbf2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T17:00:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"50a9ec6f-9fd7-4220-9efa-091b6ca4fbf2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T17:00:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"50a9ec6f-9fd7-4220-9efa-091b6ca4fbf2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T17:00:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"50a9ec6f-9fd7-4220-9efa-091b6ca4fbf2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T17:00:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d99e787a-b718-477f-852b-8a820ca47354","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:42844","PortSpecifier":{"PortValue":42844}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d99e787a-b718-477f-852b-8a820ca47354","method":"GET","path":"/maas-api/v1/api-keys/b8b3727b-4c93-438a-bf40-468a00c4a08a","host":"e2e-shared-a-8269b5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T17:00:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d99e787a-b718-477f-852b-8a820ca47354","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:42844","PortSpecifier":{"PortValue":42844}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784134825,"nanos":200507566},"http":{"id":"d99e787a-b718-477f-852b-8a820ca47354","method":"GET","headers":{":authority":"e2e-shared-a-8269b5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/b8b3727b-4c93-438a-bf40-468a00c4a08a",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:00:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d99e787a-b718-477f-852b-8a820ca47354","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T17:00:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d99e787a-b718-477f-852b-8a820ca47354","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2ffacb13-a3e0-46bc-98fe-52df4fec3861","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cb7ac727-7271-4758-b198-c4e61e072694"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2eae08074477"]}}
{"level":"debug","ts":"2026-07-15T17:00:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d99e787a-b718-477f-852b-8a820ca47354","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2eae08074477"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cb7ac727-7271-4758-b198-c4e61e072694"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2ffacb13-a3e0-46bc-98fe-52df4fec3861","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"091d01fc5bc6383a86d3f7d558c101e42d446b68ab6028635e10cb80a1788a0d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8269b5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/b8b3727b-4c93-438a-bf40-468a00c4a08a",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:00:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d99e787a-b718-477f-852b-8a820ca47354","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:00:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d99e787a-b718-477f-852b-8a820ca47354","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:00:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d99e787a-b718-477f-852b-8a820ca47354","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8269b5/auth-test-model-8269b5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8269b5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:00:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d99e787a-b718-477f-852b-8a820ca47354","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T17:00:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d99e787a-b718-477f-852b-8a820ca47354","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T17:00:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d99e787a-b718-477f-852b-8a820ca47354","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-15T17:00:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d99e787a-b718-477f-852b-8a820ca47354","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T17:00:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d99e787a-b718-477f-852b-8a820ca47354","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T17:00:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"86fd01d0-bf3a-49d3-a0df-ee1ff1dae65e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:35704","PortSpecifier":{"PortValue":35704}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"86fd01d0-bf3a-49d3-a0df-ee1ff1dae65e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8269b5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T17:00:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"86fd01d0-bf3a-49d3-a0df-ee1ff1dae65e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:35704","PortSpecifier":{"PortValue":35704}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784134840,"nanos":517258561},"http":{"id":"86fd01d0-bf3a-49d3-a0df-ee1ff1dae65e","method":"POST","headers":{":authority":"e2e-shared-a-8269b5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:00:40Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"86fd01d0-bf3a-49d3-a0df-ee1ff1dae65e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T17:00:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"86fd01d0-bf3a-49d3-a0df-ee1ff1dae65e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2ffacb13-a3e0-46bc-98fe-52df4fec3861","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cb7ac727-7271-4758-b198-c4e61e072694"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2eae08074477"]}}
{"level":"debug","ts":"2026-07-15T17:00:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"86fd01d0-bf3a-49d3-a0df-ee1ff1dae65e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2eae08074477"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cb7ac727-7271-4758-b198-c4e61e072694"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2ffacb13-a3e0-46bc-98fe-52df4fec3861","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"091d01fc5bc6383a86d3f7d558c101e42d446b68ab6028635e10cb80a1788a0d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8269b5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:00:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86fd01d0-bf3a-49d3-a0df-ee1ff1dae65e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:00:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86fd01d0-bf3a-49d3-a0df-ee1ff1dae65e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:00:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86fd01d0-bf3a-49d3-a0df-ee1ff1dae65e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8269b5/auth-test-model-8269b5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8269b5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:00:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"86fd01d0-bf3a-49d3-a0df-ee1ff1dae65e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T17:00:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"86fd01d0-bf3a-49d3-a0df-ee1ff1dae65e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T17:00:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"86fd01d0-bf3a-49d3-a0df-ee1ff1dae65e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T17:00:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"86fd01d0-bf3a-49d3-a0df-ee1ff1dae65e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T17:00:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"86fd01d0-bf3a-49d3-a0df-ee1ff1dae65e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T17:00:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ed123369-064d-4620-b404-7da2fb391304","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:38752","PortSpecifier":{"PortValue":38752}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ed123369-064d-4620-b404-7da2fb391304","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-021cd5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T17:00:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ed123369-064d-4620-b404-7da2fb391304","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:38752","PortSpecifier":{"PortValue":38752}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784134840,"nanos":563209901},"http":{"id":"ed123369-064d-4620-b404-7da2fb391304","method":"POST","headers":{":authority":"e2e-shared-b-021cd5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:00:40Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ed123369-064d-4620-b404-7da2fb391304","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T17:00:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ed123369-064d-4620-b404-7da2fb391304","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2ffacb13-a3e0-46bc-98fe-52df4fec3861","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cb7ac727-7271-4758-b198-c4e61e072694"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2eae08074477"]}}
{"level":"debug","ts":"2026-07-15T17:00:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ed123369-064d-4620-b404-7da2fb391304","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2eae08074477"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cb7ac727-7271-4758-b198-c4e61e072694"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2ffacb13-a3e0-46bc-98fe-52df4fec3861","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e9006bcd64adf2438e9d026356dd007d07411c3b54a067d90bbada1f2285442d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-021cd5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:00:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ed123369-064d-4620-b404-7da2fb391304","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:00:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ed123369-064d-4620-b404-7da2fb391304","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:00:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ed123369-064d-4620-b404-7da2fb391304","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-021cd5/auth-test-model-021cd5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-021cd5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:00:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ed123369-064d-4620-b404-7da2fb391304","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T17:00:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ed123369-064d-4620-b404-7da2fb391304","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T17:00:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ed123369-064d-4620-b404-7da2fb391304","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T17:00:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ed123369-064d-4620-b404-7da2fb391304","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T17:00:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ed123369-064d-4620-b404-7da2fb391304","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T17:00:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"77531f9b-5da2-4ee4-b9df-3948fb339520","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:35708","PortSpecifier":{"PortValue":35708}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"77531f9b-5da2-4ee4-b9df-3948fb339520","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-8269b5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T17:00:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"77531f9b-5da2-4ee4-b9df-3948fb339520","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:35708","PortSpecifier":{"PortValue":35708}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784134840,"nanos":602619868},"http":{"id":"77531f9b-5da2-4ee4-b9df-3948fb339520","method":"POST","headers":{":authority":"e2e-shared-a-8269b5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:00:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"77531f9b-5da2-4ee4-b9df-3948fb339520","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-KRcfEUWwG2Z992fs_jNVUiJeXaUPRzStMpR5QAjaDfMfCbmQSKK0c8Aa9hLf"}
{"level":"debug","ts":"2026-07-15T17:00:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"77531f9b-5da2-4ee4-b9df-3948fb339520","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8269b5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-KRcfEUWwG2Z992fs_jNVUiJeXaUPRzStMpR5QAjaDfMfCbmQSKK0c8Aa9hLf\"}"}
{"level":"debug","ts":"2026-07-15T17:00:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"77531f9b-5da2-4ee4-b9df-3948fb339520","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8269b5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0590d82e-cbfc-4ff9-8617-93db0673037b","keyName":"e2e-auth-iso-a-070180","subscription":"e2e-auth-iso-4a8ed9","tenant":"e2e-shared-a-8269b5","userId":"0590d82e-cbfc-4ff9-8617-93db0673037b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T17:00:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"77531f9b-5da2-4ee4-b9df-3948fb339520","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:00:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"77531f9b-5da2-4ee4-b9df-3948fb339520","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:00:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"77531f9b-5da2-4ee4-b9df-3948fb339520","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:00:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"77531f9b-5da2-4ee4-b9df-3948fb339520","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8269b5/auth-test-model-8269b5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8269b5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:00:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"77531f9b-5da2-4ee4-b9df-3948fb339520","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-15T17:00:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"77531f9b-5da2-4ee4-b9df-3948fb339520","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T17:00:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"77531f9b-5da2-4ee4-b9df-3948fb339520","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T17:00:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"77531f9b-5da2-4ee4-b9df-3948fb339520","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-4a8ed9"}
{"level":"info","ts":"2026-07-15T17:00:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"77531f9b-5da2-4ee4-b9df-3948fb339520","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T17:00:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"77531f9b-5da2-4ee4-b9df-3948fb339520","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T17:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dcf656ec330f312f17d5eb2ef636fee584186f136f05c32decbdf6e4cbdb0373"}
{"level":"info","ts":"2026-07-15T17:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4f50a9ae4537cdbb54b89ab7c518aa9573065f5ef4e1cd996ff184a3e19a07a3"}
{"level":"info","ts":"2026-07-15T17:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d1c1c513e7829b82299da72730615b574cfdcfa5f32b69de6c33100dc1b84b0b"}
{"level":"info","ts":"2026-07-15T17:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aebdd4492be46c28f49d6f028d2ae2373cfd06299b661a61ebe143c2171f5b6b"}
{"level":"info","ts":"2026-07-15T17:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/66b3bc1194ce5f649ee3494b9e009b24d0d94ab79716e6de31e0f00bbd392751"}
{"level":"info","ts":"2026-07-15T17:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f7ee83711f5a5fd3408dd354d826a1fa49ad4c741b311b6532c8c22baff33280"}
{"level":"info","ts":"2026-07-15T17:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/39a65605b9093046949050737a7a4fca6eb80e5b23a9463afa277ac003cb6557"}
{"level":"info","ts":"2026-07-15T17:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6d71902ee963bcae6f17623fac48f8887e654c90a0bd238a149765540dd14605"}
{"level":"info","ts":"2026-07-15T17:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/689efc089a566798d2b9e90c2513b60ea471b1c19eb5ef83390684a6b038631d"}
{"level":"info","ts":"2026-07-15T17:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b298324dd174b93effdcd5fbeeb1d980be3e0ee1fb5f9722c53fcd723bfa4271"}
{"level":"info","ts":"2026-07-15T17:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a42679631604bd9bcac712d09fb58008f3127df542578e906622e0b1d1d2c246"}
{"level":"info","ts":"2026-07-15T17:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6fb6ee5305693e45b789d14b0ee61e9537365b8323f18e2919e496a2827a6e90"}
{"level":"info","ts":"2026-07-15T17:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8469318b01fc7d54e83568af34a398ed1ad98973649221b4c1e875aa49873991"}
{"level":"info","ts":"2026-07-15T17:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c0d0292cfb35317228e003fcf41a3e385b2c53d69aa35922bdb4df311a3edb45"}
{"level":"info","ts":"2026-07-15T17:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/96cc8cd23b34933b52c36da5019e00819db46b0bccbd6d51f77700caa5b5abfb"}
{"level":"info","ts":"2026-07-15T17:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ea3dbee35bd581385c8c2a8f66c7e1c8a2d5e32e48983d30d69e206ade5d12ad"}
{"level":"debug","ts":"2026-07-15T17:01:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d4ac8eb928e625b80888df7c61f8cb8f5279f6dc2ee50e97d5fcb83e99b42a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:01:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:01:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d4ac8eb928e625b80888df7c61f8cb8f5279f6dc2ee50e97d5fcb83e99b42a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d4ac8eb928e625b80888df7c61f8cb8f5279f6dc2ee50e97d5fcb83e99b42a9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:01:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d4ac8eb928e625b80888df7c61f8cb8f5279f6dc2ee50e97d5fcb83e99b42a9"}
{"level":"debug","ts":"2026-07-15T17:01:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d4ac8eb928e625b80888df7c61f8cb8f5279f6dc2ee50e97d5fcb83e99b42a9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:01:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d4ac8eb928e625b80888df7c61f8cb8f5279f6dc2ee50e97d5fcb83e99b42a9"}
{"level":"debug","ts":"2026-07-15T17:01:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d4ac8eb928e625b80888df7c61f8cb8f5279f6dc2ee50e97d5fcb83e99b42a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:01:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:01:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d4ac8eb928e625b80888df7c61f8cb8f5279f6dc2ee50e97d5fcb83e99b42a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d4ac8eb928e625b80888df7c61f8cb8f5279f6dc2ee50e97d5fcb83e99b42a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d4ac8eb928e625b80888df7c61f8cb8f5279f6dc2ee50e97d5fcb83e99b42a9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:01:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d4ac8eb928e625b80888df7c61f8cb8f5279f6dc2ee50e97d5fcb83e99b42a9"}
{"level":"debug","ts":"2026-07-15T17:01:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33e980053aa506ceb61ba5ca7a787291d8bc4e3a79de88fab1400978207623a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:01:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:01:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33e980053aa506ceb61ba5ca7a787291d8bc4e3a79de88fab1400978207623a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33e980053aa506ceb61ba5ca7a787291d8bc4e3a79de88fab1400978207623a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33e980053aa506ceb61ba5ca7a787291d8bc4e3a79de88fab1400978207623a1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:01:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33e980053aa506ceb61ba5ca7a787291d8bc4e3a79de88fab1400978207623a1"}
{"level":"debug","ts":"2026-07-15T17:01:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33e980053aa506ceb61ba5ca7a787291d8bc4e3a79de88fab1400978207623a1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:01:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33e980053aa506ceb61ba5ca7a787291d8bc4e3a79de88fab1400978207623a1"}
{"level":"debug","ts":"2026-07-15T17:01:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33e980053aa506ceb61ba5ca7a787291d8bc4e3a79de88fab1400978207623a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:01:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:01:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33e980053aa506ceb61ba5ca7a787291d8bc4e3a79de88fab1400978207623a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33e980053aa506ceb61ba5ca7a787291d8bc4e3a79de88fab1400978207623a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33e980053aa506ceb61ba5ca7a787291d8bc4e3a79de88fab1400978207623a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc58f91eded5862d2db38ee43b38f405d9a6027fa9d1534b269d3947f7b201b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:01:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:01:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc58f91eded5862d2db38ee43b38f405d9a6027fa9d1534b269d3947f7b201b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc58f91eded5862d2db38ee43b38f405d9a6027fa9d1534b269d3947f7b201b6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:01:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33e980053aa506ceb61ba5ca7a787291d8bc4e3a79de88fab1400978207623a1"}
{"level":"debug","ts":"2026-07-15T17:01:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc58f91eded5862d2db38ee43b38f405d9a6027fa9d1534b269d3947f7b201b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:01:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:01:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc58f91eded5862d2db38ee43b38f405d9a6027fa9d1534b269d3947f7b201b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc58f91eded5862d2db38ee43b38f405d9a6027fa9d1534b269d3947f7b201b6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:01:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc58f91eded5862d2db38ee43b38f405d9a6027fa9d1534b269d3947f7b201b6"}
{"level":"debug","ts":"2026-07-15T17:01:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc58f91eded5862d2db38ee43b38f405d9a6027fa9d1534b269d3947f7b201b6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:01:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc58f91eded5862d2db38ee43b38f405d9a6027fa9d1534b269d3947f7b201b6"}
{"level":"debug","ts":"2026-07-15T17:01:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc58f91eded5862d2db38ee43b38f405d9a6027fa9d1534b269d3947f7b201b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:01:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:01:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc58f91eded5862d2db38ee43b38f405d9a6027fa9d1534b269d3947f7b201b6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc58f91eded5862d2db38ee43b38f405d9a6027fa9d1534b269d3947f7b201b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc58f91eded5862d2db38ee43b38f405d9a6027fa9d1534b269d3947f7b201b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:01:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:01:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc58f91eded5862d2db38ee43b38f405d9a6027fa9d1534b269d3947f7b201b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc58f91eded5862d2db38ee43b38f405d9a6027fa9d1534b269d3947f7b201b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc58f91eded5862d2db38ee43b38f405d9a6027fa9d1534b269d3947f7b201b6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:01:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc58f91eded5862d2db38ee43b38f405d9a6027fa9d1534b269d3947f7b201b6"}
{"level":"info","ts":"2026-07-15T17:01:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc58f91eded5862d2db38ee43b38f405d9a6027fa9d1534b269d3947f7b201b6"}
{"level":"debug","ts":"2026-07-15T17:01:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc58f91eded5862d2db38ee43b38f405d9a6027fa9d1534b269d3947f7b201b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:01:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:01:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc58f91eded5862d2db38ee43b38f405d9a6027fa9d1534b269d3947f7b201b6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc58f91eded5862d2db38ee43b38f405d9a6027fa9d1534b269d3947f7b201b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2822b38d0165d0c524b2d315301ea3b471fa28b41e65e19df70d32e33c0c2eaf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:01:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:01:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2822b38d0165d0c524b2d315301ea3b471fa28b41e65e19df70d32e33c0c2eaf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc58f91eded5862d2db38ee43b38f405d9a6027fa9d1534b269d3947f7b201b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2822b38d0165d0c524b2d315301ea3b471fa28b41e65e19df70d32e33c0c2eaf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:01:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2822b38d0165d0c524b2d315301ea3b471fa28b41e65e19df70d32e33c0c2eaf"}
{"level":"debug","ts":"2026-07-15T17:01:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2822b38d0165d0c524b2d315301ea3b471fa28b41e65e19df70d32e33c0c2eaf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:01:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:01:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2822b38d0165d0c524b2d315301ea3b471fa28b41e65e19df70d32e33c0c2eaf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2822b38d0165d0c524b2d315301ea3b471fa28b41e65e19df70d32e33c0c2eaf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2822b38d0165d0c524b2d315301ea3b471fa28b41e65e19df70d32e33c0c2eaf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:01:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc58f91eded5862d2db38ee43b38f405d9a6027fa9d1534b269d3947f7b201b6"}
{"level":"info","ts":"2026-07-15T17:01:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2822b38d0165d0c524b2d315301ea3b471fa28b41e65e19df70d32e33c0c2eaf"}
{"level":"debug","ts":"2026-07-15T17:01:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2117b62e0bf95d75eb6e079d84d79e7331de0256a1102af43ecff1f47dfd861b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:01:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:01:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2117b62e0bf95d75eb6e079d84d79e7331de0256a1102af43ecff1f47dfd861b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2117b62e0bf95d75eb6e079d84d79e7331de0256a1102af43ecff1f47dfd861b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:01:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:01:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2117b62e0bf95d75eb6e079d84d79e7331de0256a1102af43ecff1f47dfd861b"}
{"level":"info","ts":"2026-07-15T17:01:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2117b62e0bf95d75eb6e079d84d79e7331de0256a1102af43ecff1f47dfd861b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2117b62e0bf95d75eb6e079d84d79e7331de0256a1102af43ecff1f47dfd861b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:01:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:01:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-15T17:01:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2117b62e0bf95d75eb6e079d84d79e7331de0256a1102af43ecff1f47dfd861b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2117b62e0bf95d75eb6e079d84d79e7331de0256a1102af43ecff1f47dfd861b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T17:01:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2117b62e0bf95d75eb6e079d84d79e7331de0256a1102af43ecff1f47dfd861b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2117b62e0bf95d75eb6e079d84d79e7331de0256a1102af43ecff1f47dfd861b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:01:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2117b62e0bf95d75eb6e079d84d79e7331de0256a1102af43ecff1f47dfd861b"}
{"level":"info","ts":"2026-07-15T17:01:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2117b62e0bf95d75eb6e079d84d79e7331de0256a1102af43ecff1f47dfd861b"}
{"level":"debug","ts":"2026-07-15T17:01:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8948faf7e501dca8f01ee1a4473dc3a1d72df0723947f3b80ab1abd1fd0f473c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:01:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:01:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8948faf7e501dca8f01ee1a4473dc3a1d72df0723947f3b80ab1abd1fd0f473c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c01f6d01ff5cabecb730588f8b6eaf49ed2f4aab0424ef4201e893ffd2da8a15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:01:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:01:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8948faf7e501dca8f01ee1a4473dc3a1d72df0723947f3b80ab1abd1fd0f473c"}
{"level":"info","ts":"2026-07-15T17:01:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c01f6d01ff5cabecb730588f8b6eaf49ed2f4aab0424ef4201e893ffd2da8a15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2117b62e0bf95d75eb6e079d84d79e7331de0256a1102af43ecff1f47dfd861b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:01:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:01:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2117b62e0bf95d75eb6e079d84d79e7331de0256a1102af43ecff1f47dfd861b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2117b62e0bf95d75eb6e079d84d79e7331de0256a1102af43ecff1f47dfd861b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8948faf7e501dca8f01ee1a4473dc3a1d72df0723947f3b80ab1abd1fd0f473c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:01:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:01:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8948faf7e501dca8f01ee1a4473dc3a1d72df0723947f3b80ab1abd1fd0f473c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c01f6d01ff5cabecb730588f8b6eaf49ed2f4aab0424ef4201e893ffd2da8a15"}
{"level":"info","ts":"2026-07-15T17:01:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8948faf7e501dca8f01ee1a4473dc3a1d72df0723947f3b80ab1abd1fd0f473c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c01f6d01ff5cabecb730588f8b6eaf49ed2f4aab0424ef4201e893ffd2da8a15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:01:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:01:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c01f6d01ff5cabecb730588f8b6eaf49ed2f4aab0424ef4201e893ffd2da8a15"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8948faf7e501dca8f01ee1a4473dc3a1d72df0723947f3b80ab1abd1fd0f473c"}
{"level":"info","ts":"2026-07-15T17:01:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c01f6d01ff5cabecb730588f8b6eaf49ed2f4aab0424ef4201e893ffd2da8a15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2117b62e0bf95d75eb6e079d84d79e7331de0256a1102af43ecff1f47dfd861b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8948faf7e501dca8f01ee1a4473dc3a1d72df0723947f3b80ab1abd1fd0f473c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c01f6d01ff5cabecb730588f8b6eaf49ed2f4aab0424ef4201e893ffd2da8a15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:01:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:01:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c01f6d01ff5cabecb730588f8b6eaf49ed2f4aab0424ef4201e893ffd2da8a15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c01f6d01ff5cabecb730588f8b6eaf49ed2f4aab0424ef4201e893ffd2da8a15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c01f6d01ff5cabecb730588f8b6eaf49ed2f4aab0424ef4201e893ffd2da8a15","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:01:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c01f6d01ff5cabecb730588f8b6eaf49ed2f4aab0424ef4201e893ffd2da8a15"}
{"level":"debug","ts":"2026-07-15T17:01:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c01f6d01ff5cabecb730588f8b6eaf49ed2f4aab0424ef4201e893ffd2da8a15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:01:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:01:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c01f6d01ff5cabecb730588f8b6eaf49ed2f4aab0424ef4201e893ffd2da8a15"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c01f6d01ff5cabecb730588f8b6eaf49ed2f4aab0424ef4201e893ffd2da8a15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c01f6d01ff5cabecb730588f8b6eaf49ed2f4aab0424ef4201e893ffd2da8a15","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:01:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2117b62e0bf95d75eb6e079d84d79e7331de0256a1102af43ecff1f47dfd861b"}
{"level":"info","ts":"2026-07-15T17:01:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8948faf7e501dca8f01ee1a4473dc3a1d72df0723947f3b80ab1abd1fd0f473c"}
{"level":"debug","ts":"2026-07-15T17:01:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea1a3c9c2a30850c43560ffff1fead5f8aa5601d072a6cd0a2646a302d850ecc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:01:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:01:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c01f6d01ff5cabecb730588f8b6eaf49ed2f4aab0424ef4201e893ffd2da8a15"}
{"level":"info","ts":"2026-07-15T17:01:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea1a3c9c2a30850c43560ffff1fead5f8aa5601d072a6cd0a2646a302d850ecc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea1a3c9c2a30850c43560ffff1fead5f8aa5601d072a6cd0a2646a302d850ecc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:01:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:01:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea1a3c9c2a30850c43560ffff1fead5f8aa5601d072a6cd0a2646a302d850ecc"}
{"level":"info","ts":"2026-07-15T17:01:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea1a3c9c2a30850c43560ffff1fead5f8aa5601d072a6cd0a2646a302d850ecc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea1a3c9c2a30850c43560ffff1fead5f8aa5601d072a6cd0a2646a302d850ecc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:01:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:01:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-15T17:01:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ea1a3c9c2a30850c43560ffff1fead5f8aa5601d072a6cd0a2646a302d850ecc","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ea1a3c9c2a30850c43560ffff1fead5f8aa5601d072a6cd0a2646a302d850ecc\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T17:01:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea1a3c9c2a30850c43560ffff1fead5f8aa5601d072a6cd0a2646a302d850ecc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea1a3c9c2a30850c43560ffff1fead5f8aa5601d072a6cd0a2646a302d850ecc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:01:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea1a3c9c2a30850c43560ffff1fead5f8aa5601d072a6cd0a2646a302d850ecc"}
{"level":"info","ts":"2026-07-15T17:01:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea1a3c9c2a30850c43560ffff1fead5f8aa5601d072a6cd0a2646a302d850ecc"}
{"level":"debug","ts":"2026-07-15T17:01:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea1a3c9c2a30850c43560ffff1fead5f8aa5601d072a6cd0a2646a302d850ecc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:01:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:01:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea1a3c9c2a30850c43560ffff1fead5f8aa5601d072a6cd0a2646a302d850ecc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea1a3c9c2a30850c43560ffff1fead5f8aa5601d072a6cd0a2646a302d850ecc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea1a3c9c2a30850c43560ffff1fead5f8aa5601d072a6cd0a2646a302d850ecc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:01:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:01:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea1a3c9c2a30850c43560ffff1fead5f8aa5601d072a6cd0a2646a302d850ecc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea1a3c9c2a30850c43560ffff1fead5f8aa5601d072a6cd0a2646a302d850ecc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea1a3c9c2a30850c43560ffff1fead5f8aa5601d072a6cd0a2646a302d850ecc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:01:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea1a3c9c2a30850c43560ffff1fead5f8aa5601d072a6cd0a2646a302d850ecc"}
{"level":"debug","ts":"2026-07-15T17:01:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea1a3c9c2a30850c43560ffff1fead5f8aa5601d072a6cd0a2646a302d850ecc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:01:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea1a3c9c2a30850c43560ffff1fead5f8aa5601d072a6cd0a2646a302d850ecc"}
{"level":"debug","ts":"2026-07-15T17:01:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea1a3c9c2a30850c43560ffff1fead5f8aa5601d072a6cd0a2646a302d850ecc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:01:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:01:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea1a3c9c2a30850c43560ffff1fead5f8aa5601d072a6cd0a2646a302d850ecc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea1a3c9c2a30850c43560ffff1fead5f8aa5601d072a6cd0a2646a302d850ecc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea1a3c9c2a30850c43560ffff1fead5f8aa5601d072a6cd0a2646a302d850ecc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:01:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:01:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea1a3c9c2a30850c43560ffff1fead5f8aa5601d072a6cd0a2646a302d850ecc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea1a3c9c2a30850c43560ffff1fead5f8aa5601d072a6cd0a2646a302d850ecc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea1a3c9c2a30850c43560ffff1fead5f8aa5601d072a6cd0a2646a302d850ecc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:01:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea1a3c9c2a30850c43560ffff1fead5f8aa5601d072a6cd0a2646a302d850ecc"}
{"level":"debug","ts":"2026-07-15T17:01:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea1a3c9c2a30850c43560ffff1fead5f8aa5601d072a6cd0a2646a302d850ecc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:01:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea1a3c9c2a30850c43560ffff1fead5f8aa5601d072a6cd0a2646a302d850ecc"}
{"level":"debug","ts":"2026-07-15T17:01:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea1a3c9c2a30850c43560ffff1fead5f8aa5601d072a6cd0a2646a302d850ecc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:01:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:01:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea1a3c9c2a30850c43560ffff1fead5f8aa5601d072a6cd0a2646a302d850ecc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea1a3c9c2a30850c43560ffff1fead5f8aa5601d072a6cd0a2646a302d850ecc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea1a3c9c2a30850c43560ffff1fead5f8aa5601d072a6cd0a2646a302d850ecc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:01:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea1a3c9c2a30850c43560ffff1fead5f8aa5601d072a6cd0a2646a302d850ecc"}
{"level":"debug","ts":"2026-07-15T17:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8927a2ee45d9fc408d76c2ff447b0054c86256bc418ec7ae66237ff3fb3558a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:01:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:01:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8927a2ee45d9fc408d76c2ff447b0054c86256bc418ec7ae66237ff3fb3558a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8927a2ee45d9fc408d76c2ff447b0054c86256bc418ec7ae66237ff3fb3558a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8927a2ee45d9fc408d76c2ff447b0054c86256bc418ec7ae66237ff3fb3558a7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8927a2ee45d9fc408d76c2ff447b0054c86256bc418ec7ae66237ff3fb3558a7"}
{"level":"debug","ts":"2026-07-15T17:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8927a2ee45d9fc408d76c2ff447b0054c86256bc418ec7ae66237ff3fb3558a7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8927a2ee45d9fc408d76c2ff447b0054c86256bc418ec7ae66237ff3fb3558a7"}
{"level":"debug","ts":"2026-07-15T17:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8927a2ee45d9fc408d76c2ff447b0054c86256bc418ec7ae66237ff3fb3558a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:01:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:01:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8927a2ee45d9fc408d76c2ff447b0054c86256bc418ec7ae66237ff3fb3558a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8927a2ee45d9fc408d76c2ff447b0054c86256bc418ec7ae66237ff3fb3558a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8927a2ee45d9fc408d76c2ff447b0054c86256bc418ec7ae66237ff3fb3558a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:01:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:01:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8927a2ee45d9fc408d76c2ff447b0054c86256bc418ec7ae66237ff3fb3558a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8927a2ee45d9fc408d76c2ff447b0054c86256bc418ec7ae66237ff3fb3558a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8927a2ee45d9fc408d76c2ff447b0054c86256bc418ec7ae66237ff3fb3558a7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8927a2ee45d9fc408d76c2ff447b0054c86256bc418ec7ae66237ff3fb3558a7"}
{"level":"debug","ts":"2026-07-15T17:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8927a2ee45d9fc408d76c2ff447b0054c86256bc418ec7ae66237ff3fb3558a7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8927a2ee45d9fc408d76c2ff447b0054c86256bc418ec7ae66237ff3fb3558a7"}
{"level":"debug","ts":"2026-07-15T17:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8927a2ee45d9fc408d76c2ff447b0054c86256bc418ec7ae66237ff3fb3558a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:01:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:01:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8927a2ee45d9fc408d76c2ff447b0054c86256bc418ec7ae66237ff3fb3558a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8927a2ee45d9fc408d76c2ff447b0054c86256bc418ec7ae66237ff3fb3558a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8927a2ee45d9fc408d76c2ff447b0054c86256bc418ec7ae66237ff3fb3558a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:01:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:01:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8927a2ee45d9fc408d76c2ff447b0054c86256bc418ec7ae66237ff3fb3558a7"}
{"level":"info","ts":"2026-07-15T17:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a4f3def323a222738b877f8df97dd138fe22800d9d1a420ff05bbcdb0e3f74b"}
{"level":"info","ts":"2026-07-15T17:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8927a2ee45d9fc408d76c2ff447b0054c86256bc418ec7ae66237ff3fb3558a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a4f3def323a222738b877f8df97dd138fe22800d9d1a420ff05bbcdb0e3f74b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:01:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:01:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a4f3def323a222738b877f8df97dd138fe22800d9d1a420ff05bbcdb0e3f74b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8927a2ee45d9fc408d76c2ff447b0054c86256bc418ec7ae66237ff3fb3558a7"}
{"level":"info","ts":"2026-07-15T17:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a4f3def323a222738b877f8df97dd138fe22800d9d1a420ff05bbcdb0e3f74b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8927a2ee45d9fc408d76c2ff447b0054c86256bc418ec7ae66237ff3fb3558a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:01:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:01:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8927a2ee45d9fc408d76c2ff447b0054c86256bc418ec7ae66237ff3fb3558a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a4f3def323a222738b877f8df97dd138fe22800d9d1a420ff05bbcdb0e3f74b"}
{"level":"info","ts":"2026-07-15T17:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8927a2ee45d9fc408d76c2ff447b0054c86256bc418ec7ae66237ff3fb3558a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a4f3def323a222738b877f8df97dd138fe22800d9d1a420ff05bbcdb0e3f74b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8927a2ee45d9fc408d76c2ff447b0054c86256bc418ec7ae66237ff3fb3558a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:01:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:01:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8927a2ee45d9fc408d76c2ff447b0054c86256bc418ec7ae66237ff3fb3558a7"}
{"level":"info","ts":"2026-07-15T17:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8927a2ee45d9fc408d76c2ff447b0054c86256bc418ec7ae66237ff3fb3558a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8927a2ee45d9fc408d76c2ff447b0054c86256bc418ec7ae66237ff3fb3558a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8927a2ee45d9fc408d76c2ff447b0054c86256bc418ec7ae66237ff3fb3558a7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8927a2ee45d9fc408d76c2ff447b0054c86256bc418ec7ae66237ff3fb3558a7"}
{"level":"debug","ts":"2026-07-15T17:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3c77f0139275cfd738c1551115aa2b145e7af2bab57c5cf6152868060c79666","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:01:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:01:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3c77f0139275cfd738c1551115aa2b145e7af2bab57c5cf6152868060c79666"}
{"level":"info","ts":"2026-07-15T17:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3c77f0139275cfd738c1551115aa2b145e7af2bab57c5cf6152868060c79666","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8927a2ee45d9fc408d76c2ff447b0054c86256bc418ec7ae66237ff3fb3558a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:01:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:01:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8927a2ee45d9fc408d76c2ff447b0054c86256bc418ec7ae66237ff3fb3558a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3c77f0139275cfd738c1551115aa2b145e7af2bab57c5cf6152868060c79666"}
{"level":"info","ts":"2026-07-15T17:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8927a2ee45d9fc408d76c2ff447b0054c86256bc418ec7ae66237ff3fb3558a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3c77f0139275cfd738c1551115aa2b145e7af2bab57c5cf6152868060c79666","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:01:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:01:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a3c77f0139275cfd738c1551115aa2b145e7af2bab57c5cf6152868060c79666"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3c77f0139275cfd738c1551115aa2b145e7af2bab57c5cf6152868060c79666","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8927a2ee45d9fc408d76c2ff447b0054c86256bc418ec7ae66237ff3fb3558a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:01:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:01:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8927a2ee45d9fc408d76c2ff447b0054c86256bc418ec7ae66237ff3fb3558a7"}
{"level":"info","ts":"2026-07-15T17:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8927a2ee45d9fc408d76c2ff447b0054c86256bc418ec7ae66237ff3fb3558a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3c77f0139275cfd738c1551115aa2b145e7af2bab57c5cf6152868060c79666","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:01:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:01:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3c77f0139275cfd738c1551115aa2b145e7af2bab57c5cf6152868060c79666"}
{"level":"info","ts":"2026-07-15T17:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3c77f0139275cfd738c1551115aa2b145e7af2bab57c5cf6152868060c79666","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8927a2ee45d9fc408d76c2ff447b0054c86256bc418ec7ae66237ff3fb3558a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3c77f0139275cfd738c1551115aa2b145e7af2bab57c5cf6152868060c79666","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:01:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:01:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a3c77f0139275cfd738c1551115aa2b145e7af2bab57c5cf6152868060c79666"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8927a2ee45d9fc408d76c2ff447b0054c86256bc418ec7ae66237ff3fb3558a7"}
{"level":"info","ts":"2026-07-15T17:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3c77f0139275cfd738c1551115aa2b145e7af2bab57c5cf6152868060c79666","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8927a2ee45d9fc408d76c2ff447b0054c86256bc418ec7ae66237ff3fb3558a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:01:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:01:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8927a2ee45d9fc408d76c2ff447b0054c86256bc418ec7ae66237ff3fb3558a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8927a2ee45d9fc408d76c2ff447b0054c86256bc418ec7ae66237ff3fb3558a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3c77f0139275cfd738c1551115aa2b145e7af2bab57c5cf6152868060c79666","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:01:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:01:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3c77f0139275cfd738c1551115aa2b145e7af2bab57c5cf6152868060c79666"}
{"level":"info","ts":"2026-07-15T17:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3c77f0139275cfd738c1551115aa2b145e7af2bab57c5cf6152868060c79666","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8927a2ee45d9fc408d76c2ff447b0054c86256bc418ec7ae66237ff3fb3558a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:01:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:01:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8927a2ee45d9fc408d76c2ff447b0054c86256bc418ec7ae66237ff3fb3558a7"}
{"level":"info","ts":"2026-07-15T17:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8927a2ee45d9fc408d76c2ff447b0054c86256bc418ec7ae66237ff3fb3558a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3c77f0139275cfd738c1551115aa2b145e7af2bab57c5cf6152868060c79666","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8927a2ee45d9fc408d76c2ff447b0054c86256bc418ec7ae66237ff3fb3558a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:01:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:01:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8927a2ee45d9fc408d76c2ff447b0054c86256bc418ec7ae66237ff3fb3558a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8927a2ee45d9fc408d76c2ff447b0054c86256bc418ec7ae66237ff3fb3558a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3c77f0139275cfd738c1551115aa2b145e7af2bab57c5cf6152868060c79666","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8927a2ee45d9fc408d76c2ff447b0054c86256bc418ec7ae66237ff3fb3558a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:01:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:01:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8927a2ee45d9fc408d76c2ff447b0054c86256bc418ec7ae66237ff3fb3558a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3c77f0139275cfd738c1551115aa2b145e7af2bab57c5cf6152868060c79666"}
{"level":"error","ts":"2026-07-15T17:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8927a2ee45d9fc408d76c2ff447b0054c86256bc418ec7ae66237ff3fb3558a7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8927a2ee45d9fc408d76c2ff447b0054c86256bc418ec7ae66237ff3fb3558a7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T17:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8927a2ee45d9fc408d76c2ff447b0054c86256bc418ec7ae66237ff3fb3558a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:01:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:01:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8927a2ee45d9fc408d76c2ff447b0054c86256bc418ec7ae66237ff3fb3558a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50858acd9c1e5697d36a1754b5f18f962da3ff4c865ff25bf3d7fc3c6031eadb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:01:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:01:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8927a2ee45d9fc408d76c2ff447b0054c86256bc418ec7ae66237ff3fb3558a7"}
{"level":"info","ts":"2026-07-15T17:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50858acd9c1e5697d36a1754b5f18f962da3ff4c865ff25bf3d7fc3c6031eadb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3c77f0139275cfd738c1551115aa2b145e7af2bab57c5cf6152868060c79666","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:01:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:01:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a3c77f0139275cfd738c1551115aa2b145e7af2bab57c5cf6152868060c79666"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50858acd9c1e5697d36a1754b5f18f962da3ff4c865ff25bf3d7fc3c6031eadb"}
{"level":"info","ts":"2026-07-15T17:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3c77f0139275cfd738c1551115aa2b145e7af2bab57c5cf6152868060c79666","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8927a2ee45d9fc408d76c2ff447b0054c86256bc418ec7ae66237ff3fb3558a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50858acd9c1e5697d36a1754b5f18f962da3ff4c865ff25bf3d7fc3c6031eadb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:01:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:01:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["50858acd9c1e5697d36a1754b5f18f962da3ff4c865ff25bf3d7fc3c6031eadb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8927a2ee45d9fc408d76c2ff447b0054c86256bc418ec7ae66237ff3fb3558a7"}
{"level":"info","ts":"2026-07-15T17:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50858acd9c1e5697d36a1754b5f18f962da3ff4c865ff25bf3d7fc3c6031eadb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3c77f0139275cfd738c1551115aa2b145e7af2bab57c5cf6152868060c79666","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50858acd9c1e5697d36a1754b5f18f962da3ff4c865ff25bf3d7fc3c6031eadb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:01:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:01:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50858acd9c1e5697d36a1754b5f18f962da3ff4c865ff25bf3d7fc3c6031eadb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8927a2ee45d9fc408d76c2ff447b0054c86256bc418ec7ae66237ff3fb3558a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:01:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:01:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8927a2ee45d9fc408d76c2ff447b0054c86256bc418ec7ae66237ff3fb3558a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50858acd9c1e5697d36a1754b5f18f962da3ff4c865ff25bf3d7fc3c6031eadb"}
{"level":"info","ts":"2026-07-15T17:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8927a2ee45d9fc408d76c2ff447b0054c86256bc418ec7ae66237ff3fb3558a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50858acd9c1e5697d36a1754b5f18f962da3ff4c865ff25bf3d7fc3c6031eadb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:01:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:01:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["50858acd9c1e5697d36a1754b5f18f962da3ff4c865ff25bf3d7fc3c6031eadb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3c77f0139275cfd738c1551115aa2b145e7af2bab57c5cf6152868060c79666"}
{"level":"info","ts":"2026-07-15T17:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50858acd9c1e5697d36a1754b5f18f962da3ff4c865ff25bf3d7fc3c6031eadb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8927a2ee45d9fc408d76c2ff447b0054c86256bc418ec7ae66237ff3fb3558a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50858acd9c1e5697d36a1754b5f18f962da3ff4c865ff25bf3d7fc3c6031eadb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:01:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:01:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50858acd9c1e5697d36a1754b5f18f962da3ff4c865ff25bf3d7fc3c6031eadb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50858acd9c1e5697d36a1754b5f18f962da3ff4c865ff25bf3d7fc3c6031eadb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50858acd9c1e5697d36a1754b5f18f962da3ff4c865ff25bf3d7fc3c6031eadb"}
{"level":"debug","ts":"2026-07-15T17:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50858acd9c1e5697d36a1754b5f18f962da3ff4c865ff25bf3d7fc3c6031eadb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:01:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:01:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["50858acd9c1e5697d36a1754b5f18f962da3ff4c865ff25bf3d7fc3c6031eadb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50858acd9c1e5697d36a1754b5f18f962da3ff4c865ff25bf3d7fc3c6031eadb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50858acd9c1e5697d36a1754b5f18f962da3ff4c865ff25bf3d7fc3c6031eadb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8927a2ee45d9fc408d76c2ff447b0054c86256bc418ec7ae66237ff3fb3558a7"}
{"level":"info","ts":"2026-07-15T17:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50858acd9c1e5697d36a1754b5f18f962da3ff4c865ff25bf3d7fc3c6031eadb"}
{"level":"debug","ts":"2026-07-15T17:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0569fd88e03634963bd47943e7eab3cf3bcc1f06d312f50cae2ec55c71c3829a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:01:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:01:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0569fd88e03634963bd47943e7eab3cf3bcc1f06d312f50cae2ec55c71c3829a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0569fd88e03634963bd47943e7eab3cf3bcc1f06d312f50cae2ec55c71c3829a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0569fd88e03634963bd47943e7eab3cf3bcc1f06d312f50cae2ec55c71c3829a"}
{"level":"debug","ts":"2026-07-15T17:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0569fd88e03634963bd47943e7eab3cf3bcc1f06d312f50cae2ec55c71c3829a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0569fd88e03634963bd47943e7eab3cf3bcc1f06d312f50cae2ec55c71c3829a"}
{"level":"debug","ts":"2026-07-15T17:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0569fd88e03634963bd47943e7eab3cf3bcc1f06d312f50cae2ec55c71c3829a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:01:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:01:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0569fd88e03634963bd47943e7eab3cf3bcc1f06d312f50cae2ec55c71c3829a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0569fd88e03634963bd47943e7eab3cf3bcc1f06d312f50cae2ec55c71c3829a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0569fd88e03634963bd47943e7eab3cf3bcc1f06d312f50cae2ec55c71c3829a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0569fd88e03634963bd47943e7eab3cf3bcc1f06d312f50cae2ec55c71c3829a"}
{"level":"debug","ts":"2026-07-15T17:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5214077cb562c42bc1beb35cde4df1f746e5404b22b5daa90dce245b9cd6649","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:01:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:01:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5214077cb562c42bc1beb35cde4df1f746e5404b22b5daa90dce245b9cd6649","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5214077cb562c42bc1beb35cde4df1f746e5404b22b5daa90dce245b9cd6649","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5214077cb562c42bc1beb35cde4df1f746e5404b22b5daa90dce245b9cd6649","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5214077cb562c42bc1beb35cde4df1f746e5404b22b5daa90dce245b9cd6649"}
{"level":"debug","ts":"2026-07-15T17:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5214077cb562c42bc1beb35cde4df1f746e5404b22b5daa90dce245b9cd6649","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5214077cb562c42bc1beb35cde4df1f746e5404b22b5daa90dce245b9cd6649"}
{"level":"debug","ts":"2026-07-15T17:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5214077cb562c42bc1beb35cde4df1f746e5404b22b5daa90dce245b9cd6649","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:01:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:01:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b5214077cb562c42bc1beb35cde4df1f746e5404b22b5daa90dce245b9cd6649"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5214077cb562c42bc1beb35cde4df1f746e5404b22b5daa90dce245b9cd6649","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69bd01f0fc2ac57a2465546c687a9d1be23ca9b01b42340f324eb78ac770baeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:01:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:01:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69bd01f0fc2ac57a2465546c687a9d1be23ca9b01b42340f324eb78ac770baeb"}
{"level":"info","ts":"2026-07-15T17:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69bd01f0fc2ac57a2465546c687a9d1be23ca9b01b42340f324eb78ac770baeb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5214077cb562c42bc1beb35cde4df1f746e5404b22b5daa90dce245b9cd6649","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:01:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:01:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5214077cb562c42bc1beb35cde4df1f746e5404b22b5daa90dce245b9cd6649","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69bd01f0fc2ac57a2465546c687a9d1be23ca9b01b42340f324eb78ac770baeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:01:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:01:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["69bd01f0fc2ac57a2465546c687a9d1be23ca9b01b42340f324eb78ac770baeb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5214077cb562c42bc1beb35cde4df1f746e5404b22b5daa90dce245b9cd6649"}
{"level":"info","ts":"2026-07-15T17:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69bd01f0fc2ac57a2465546c687a9d1be23ca9b01b42340f324eb78ac770baeb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5214077cb562c42bc1beb35cde4df1f746e5404b22b5daa90dce245b9cd6649","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:01:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:01:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b5214077cb562c42bc1beb35cde4df1f746e5404b22b5daa90dce245b9cd6649"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69bd01f0fc2ac57a2465546c687a9d1be23ca9b01b42340f324eb78ac770baeb"}
{"level":"info","ts":"2026-07-15T17:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5214077cb562c42bc1beb35cde4df1f746e5404b22b5daa90dce245b9cd6649","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69bd01f0fc2ac57a2465546c687a9d1be23ca9b01b42340f324eb78ac770baeb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5214077cb562c42bc1beb35cde4df1f746e5404b22b5daa90dce245b9cd6649","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:01:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:01:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5214077cb562c42bc1beb35cde4df1f746e5404b22b5daa90dce245b9cd6649","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5214077cb562c42bc1beb35cde4df1f746e5404b22b5daa90dce245b9cd6649"}
{"level":"debug","ts":"2026-07-15T17:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5214077cb562c42bc1beb35cde4df1f746e5404b22b5daa90dce245b9cd6649","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:01:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:01:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b5214077cb562c42bc1beb35cde4df1f746e5404b22b5daa90dce245b9cd6649"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5214077cb562c42bc1beb35cde4df1f746e5404b22b5daa90dce245b9cd6649","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5214077cb562c42bc1beb35cde4df1f746e5404b22b5daa90dce245b9cd6649","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:01:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:01:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b5214077cb562c42bc1beb35cde4df1f746e5404b22b5daa90dce245b9cd6649"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69bd01f0fc2ac57a2465546c687a9d1be23ca9b01b42340f324eb78ac770baeb"}
{"level":"error","ts":"2026-07-15T17:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b5214077cb562c42bc1beb35cde4df1f746e5404b22b5daa90dce245b9cd6649","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b5214077cb562c42bc1beb35cde4df1f746e5404b22b5daa90dce245b9cd6649\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T17:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad753c29ffa48027e11eef114919383f68a798ef7935cf0e2fd118a5fa2ae0f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:01:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:01:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad753c29ffa48027e11eef114919383f68a798ef7935cf0e2fd118a5fa2ae0f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5214077cb562c42bc1beb35cde4df1f746e5404b22b5daa90dce245b9cd6649","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:01:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:01:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5214077cb562c42bc1beb35cde4df1f746e5404b22b5daa90dce245b9cd6649"}
{"level":"info","ts":"2026-07-15T17:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5214077cb562c42bc1beb35cde4df1f746e5404b22b5daa90dce245b9cd6649","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad753c29ffa48027e11eef114919383f68a798ef7935cf0e2fd118a5fa2ae0f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:01:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:01:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad753c29ffa48027e11eef114919383f68a798ef7935cf0e2fd118a5fa2ae0f9"}
{"level":"info","ts":"2026-07-15T17:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad753c29ffa48027e11eef114919383f68a798ef7935cf0e2fd118a5fa2ae0f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5214077cb562c42bc1beb35cde4df1f746e5404b22b5daa90dce245b9cd6649","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad753c29ffa48027e11eef114919383f68a798ef7935cf0e2fd118a5fa2ae0f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:01:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:01:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad753c29ffa48027e11eef114919383f68a798ef7935cf0e2fd118a5fa2ae0f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad753c29ffa48027e11eef114919383f68a798ef7935cf0e2fd118a5fa2ae0f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad753c29ffa48027e11eef114919383f68a798ef7935cf0e2fd118a5fa2ae0f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:01:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:01:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad753c29ffa48027e11eef114919383f68a798ef7935cf0e2fd118a5fa2ae0f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5214077cb562c42bc1beb35cde4df1f746e5404b22b5daa90dce245b9cd6649"}
{"level":"error","ts":"2026-07-15T17:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ad753c29ffa48027e11eef114919383f68a798ef7935cf0e2fd118a5fa2ae0f9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ad753c29ffa48027e11eef114919383f68a798ef7935cf0e2fd118a5fa2ae0f9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T17:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5214077cb562c42bc1beb35cde4df1f746e5404b22b5daa90dce245b9cd6649","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:01:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:01:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b5214077cb562c42bc1beb35cde4df1f746e5404b22b5daa90dce245b9cd6649"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5214077cb562c42bc1beb35cde4df1f746e5404b22b5daa90dce245b9cd6649","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad753c29ffa48027e11eef114919383f68a798ef7935cf0e2fd118a5fa2ae0f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:01:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:01:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad753c29ffa48027e11eef114919383f68a798ef7935cf0e2fd118a5fa2ae0f9"}
{"level":"info","ts":"2026-07-15T17:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad753c29ffa48027e11eef114919383f68a798ef7935cf0e2fd118a5fa2ae0f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5214077cb562c42bc1beb35cde4df1f746e5404b22b5daa90dce245b9cd6649","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:01:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:01:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5214077cb562c42bc1beb35cde4df1f746e5404b22b5daa90dce245b9cd6649"}
{"level":"info","ts":"2026-07-15T17:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5214077cb562c42bc1beb35cde4df1f746e5404b22b5daa90dce245b9cd6649","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad753c29ffa48027e11eef114919383f68a798ef7935cf0e2fd118a5fa2ae0f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5214077cb562c42bc1beb35cde4df1f746e5404b22b5daa90dce245b9cd6649","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:01:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:01:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b5214077cb562c42bc1beb35cde4df1f746e5404b22b5daa90dce245b9cd6649"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad753c29ffa48027e11eef114919383f68a798ef7935cf0e2fd118a5fa2ae0f9"}
{"level":"info","ts":"2026-07-15T17:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5214077cb562c42bc1beb35cde4df1f746e5404b22b5daa90dce245b9cd6649","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5214077cb562c42bc1beb35cde4df1f746e5404b22b5daa90dce245b9cd6649","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5214077cb562c42bc1beb35cde4df1f746e5404b22b5daa90dce245b9cd6649","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:01:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:01:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5214077cb562c42bc1beb35cde4df1f746e5404b22b5daa90dce245b9cd6649","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad753c29ffa48027e11eef114919383f68a798ef7935cf0e2fd118a5fa2ae0f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:01:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:01:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad753c29ffa48027e11eef114919383f68a798ef7935cf0e2fd118a5fa2ae0f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5214077cb562c42bc1beb35cde4df1f746e5404b22b5daa90dce245b9cd6649"}
{"level":"info","ts":"2026-07-15T17:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad753c29ffa48027e11eef114919383f68a798ef7935cf0e2fd118a5fa2ae0f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5214077cb562c42bc1beb35cde4df1f746e5404b22b5daa90dce245b9cd6649","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad753c29ffa48027e11eef114919383f68a798ef7935cf0e2fd118a5fa2ae0f9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5214077cb562c42bc1beb35cde4df1f746e5404b22b5daa90dce245b9cd6649"}
{"level":"debug","ts":"2026-07-15T17:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5214077cb562c42bc1beb35cde4df1f746e5404b22b5daa90dce245b9cd6649","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:01:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:01:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b5214077cb562c42bc1beb35cde4df1f746e5404b22b5daa90dce245b9cd6649"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5214077cb562c42bc1beb35cde4df1f746e5404b22b5daa90dce245b9cd6649","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5214077cb562c42bc1beb35cde4df1f746e5404b22b5daa90dce245b9cd6649","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad753c29ffa48027e11eef114919383f68a798ef7935cf0e2fd118a5fa2ae0f9"}
{"level":"info","ts":"2026-07-15T17:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5214077cb562c42bc1beb35cde4df1f746e5404b22b5daa90dce245b9cd6649"}
{"level":"debug","ts":"2026-07-15T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"091d01fc5bc6383a86d3f7d558c101e42d446b68ab6028635e10cb80a1788a0d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:01:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:01:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"091d01fc5bc6383a86d3f7d558c101e42d446b68ab6028635e10cb80a1788a0d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"091d01fc5bc6383a86d3f7d558c101e42d446b68ab6028635e10cb80a1788a0d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/091d01fc5bc6383a86d3f7d558c101e42d446b68ab6028635e10cb80a1788a0d"}
{"level":"debug","ts":"2026-07-15T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"091d01fc5bc6383a86d3f7d558c101e42d446b68ab6028635e10cb80a1788a0d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/091d01fc5bc6383a86d3f7d558c101e42d446b68ab6028635e10cb80a1788a0d"}
{"level":"debug","ts":"2026-07-15T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"091d01fc5bc6383a86d3f7d558c101e42d446b68ab6028635e10cb80a1788a0d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:01:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:01:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["091d01fc5bc6383a86d3f7d558c101e42d446b68ab6028635e10cb80a1788a0d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"091d01fc5bc6383a86d3f7d558c101e42d446b68ab6028635e10cb80a1788a0d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"091d01fc5bc6383a86d3f7d558c101e42d446b68ab6028635e10cb80a1788a0d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:01:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:01:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"091d01fc5bc6383a86d3f7d558c101e42d446b68ab6028635e10cb80a1788a0d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"091d01fc5bc6383a86d3f7d558c101e42d446b68ab6028635e10cb80a1788a0d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"091d01fc5bc6383a86d3f7d558c101e42d446b68ab6028635e10cb80a1788a0d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:01:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/091d01fc5bc6383a86d3f7d558c101e42d446b68ab6028635e10cb80a1788a0d"}
{"level":"debug","ts":"2026-07-15T17:01:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"091d01fc5bc6383a86d3f7d558c101e42d446b68ab6028635e10cb80a1788a0d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:01:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/091d01fc5bc6383a86d3f7d558c101e42d446b68ab6028635e10cb80a1788a0d"}
{"level":"debug","ts":"2026-07-15T17:01:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"091d01fc5bc6383a86d3f7d558c101e42d446b68ab6028635e10cb80a1788a0d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:01:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:01:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["091d01fc5bc6383a86d3f7d558c101e42d446b68ab6028635e10cb80a1788a0d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"091d01fc5bc6383a86d3f7d558c101e42d446b68ab6028635e10cb80a1788a0d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"091d01fc5bc6383a86d3f7d558c101e42d446b68ab6028635e10cb80a1788a0d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:01:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:01:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"091d01fc5bc6383a86d3f7d558c101e42d446b68ab6028635e10cb80a1788a0d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"091d01fc5bc6383a86d3f7d558c101e42d446b68ab6028635e10cb80a1788a0d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"091d01fc5bc6383a86d3f7d558c101e42d446b68ab6028635e10cb80a1788a0d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:01:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/091d01fc5bc6383a86d3f7d558c101e42d446b68ab6028635e10cb80a1788a0d"}
{"level":"debug","ts":"2026-07-15T17:01:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"091d01fc5bc6383a86d3f7d558c101e42d446b68ab6028635e10cb80a1788a0d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:01:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/091d01fc5bc6383a86d3f7d558c101e42d446b68ab6028635e10cb80a1788a0d"}
{"level":"debug","ts":"2026-07-15T17:01:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"091d01fc5bc6383a86d3f7d558c101e42d446b68ab6028635e10cb80a1788a0d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:01:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:01:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["091d01fc5bc6383a86d3f7d558c101e42d446b68ab6028635e10cb80a1788a0d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"091d01fc5bc6383a86d3f7d558c101e42d446b68ab6028635e10cb80a1788a0d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"091d01fc5bc6383a86d3f7d558c101e42d446b68ab6028635e10cb80a1788a0d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:01:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:01:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"091d01fc5bc6383a86d3f7d558c101e42d446b68ab6028635e10cb80a1788a0d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"091d01fc5bc6383a86d3f7d558c101e42d446b68ab6028635e10cb80a1788a0d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"091d01fc5bc6383a86d3f7d558c101e42d446b68ab6028635e10cb80a1788a0d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:01:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/091d01fc5bc6383a86d3f7d558c101e42d446b68ab6028635e10cb80a1788a0d"}
{"level":"debug","ts":"2026-07-15T17:01:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0569fd88e03634963bd47943e7eab3cf3bcc1f06d312f50cae2ec55c71c3829a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"091d01fc5bc6383a86d3f7d558c101e42d446b68ab6028635e10cb80a1788a0d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:01:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/091d01fc5bc6383a86d3f7d558c101e42d446b68ab6028635e10cb80a1788a0d"}
{"level":"info","ts":"2026-07-15T17:01:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0569fd88e03634963bd47943e7eab3cf3bcc1f06d312f50cae2ec55c71c3829a"}
{"level":"debug","ts":"2026-07-15T17:01:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"091d01fc5bc6383a86d3f7d558c101e42d446b68ab6028635e10cb80a1788a0d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:01:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:01:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["091d01fc5bc6383a86d3f7d558c101e42d446b68ab6028635e10cb80a1788a0d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"091d01fc5bc6383a86d3f7d558c101e42d446b68ab6028635e10cb80a1788a0d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"091d01fc5bc6383a86d3f7d558c101e42d446b68ab6028635e10cb80a1788a0d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:01:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:01:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"091d01fc5bc6383a86d3f7d558c101e42d446b68ab6028635e10cb80a1788a0d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"091d01fc5bc6383a86d3f7d558c101e42d446b68ab6028635e10cb80a1788a0d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"091d01fc5bc6383a86d3f7d558c101e42d446b68ab6028635e10cb80a1788a0d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:01:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/091d01fc5bc6383a86d3f7d558c101e42d446b68ab6028635e10cb80a1788a0d"}
{"level":"debug","ts":"2026-07-15T17:01:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"091d01fc5bc6383a86d3f7d558c101e42d446b68ab6028635e10cb80a1788a0d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:01:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/091d01fc5bc6383a86d3f7d558c101e42d446b68ab6028635e10cb80a1788a0d"}
{"level":"debug","ts":"2026-07-15T17:01:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"091d01fc5bc6383a86d3f7d558c101e42d446b68ab6028635e10cb80a1788a0d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:01:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:01:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["091d01fc5bc6383a86d3f7d558c101e42d446b68ab6028635e10cb80a1788a0d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"091d01fc5bc6383a86d3f7d558c101e42d446b68ab6028635e10cb80a1788a0d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"091d01fc5bc6383a86d3f7d558c101e42d446b68ab6028635e10cb80a1788a0d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:01:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/091d01fc5bc6383a86d3f7d558c101e42d446b68ab6028635e10cb80a1788a0d"}
{"level":"debug","ts":"2026-07-15T17:01:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33e980053aa506ceb61ba5ca7a787291d8bc4e3a79de88fab1400978207623a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:01:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:01:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33e980053aa506ceb61ba5ca7a787291d8bc4e3a79de88fab1400978207623a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33e980053aa506ceb61ba5ca7a787291d8bc4e3a79de88fab1400978207623a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33e980053aa506ceb61ba5ca7a787291d8bc4e3a79de88fab1400978207623a1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:01:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33e980053aa506ceb61ba5ca7a787291d8bc4e3a79de88fab1400978207623a1"}
{"level":"debug","ts":"2026-07-15T17:01:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33e980053aa506ceb61ba5ca7a787291d8bc4e3a79de88fab1400978207623a1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:01:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33e980053aa506ceb61ba5ca7a787291d8bc4e3a79de88fab1400978207623a1"}
{"level":"debug","ts":"2026-07-15T17:01:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33e980053aa506ceb61ba5ca7a787291d8bc4e3a79de88fab1400978207623a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:01:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:01:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33e980053aa506ceb61ba5ca7a787291d8bc4e3a79de88fab1400978207623a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33e980053aa506ceb61ba5ca7a787291d8bc4e3a79de88fab1400978207623a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33e980053aa506ceb61ba5ca7a787291d8bc4e3a79de88fab1400978207623a1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:01:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33e980053aa506ceb61ba5ca7a787291d8bc4e3a79de88fab1400978207623a1"}
{"level":"debug","ts":"2026-07-15T17:01:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69bd01f0fc2ac57a2465546c687a9d1be23ca9b01b42340f324eb78ac770baeb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:01:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69bd01f0fc2ac57a2465546c687a9d1be23ca9b01b42340f324eb78ac770baeb"}
{"level":"debug","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3c77f0139275cfd738c1551115aa2b145e7af2bab57c5cf6152868060c79666","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:01:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:01:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3c77f0139275cfd738c1551115aa2b145e7af2bab57c5cf6152868060c79666","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3c77f0139275cfd738c1551115aa2b145e7af2bab57c5cf6152868060c79666","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3c77f0139275cfd738c1551115aa2b145e7af2bab57c5cf6152868060c79666","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3c77f0139275cfd738c1551115aa2b145e7af2bab57c5cf6152868060c79666"}
{"level":"info","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3c77f0139275cfd738c1551115aa2b145e7af2bab57c5cf6152868060c79666"}
{"level":"debug","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3c77f0139275cfd738c1551115aa2b145e7af2bab57c5cf6152868060c79666","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:01:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:01:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a3c77f0139275cfd738c1551115aa2b145e7af2bab57c5cf6152868060c79666"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3c77f0139275cfd738c1551115aa2b145e7af2bab57c5cf6152868060c79666","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3c77f0139275cfd738c1551115aa2b145e7af2bab57c5cf6152868060c79666","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3c77f0139275cfd738c1551115aa2b145e7af2bab57c5cf6152868060c79666"}
{"level":"debug","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c01f6d01ff5cabecb730588f8b6eaf49ed2f4aab0424ef4201e893ffd2da8a15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:01:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:01:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c01f6d01ff5cabecb730588f8b6eaf49ed2f4aab0424ef4201e893ffd2da8a15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c01f6d01ff5cabecb730588f8b6eaf49ed2f4aab0424ef4201e893ffd2da8a15","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c01f6d01ff5cabecb730588f8b6eaf49ed2f4aab0424ef4201e893ffd2da8a15"}
{"level":"debug","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c01f6d01ff5cabecb730588f8b6eaf49ed2f4aab0424ef4201e893ffd2da8a15","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c01f6d01ff5cabecb730588f8b6eaf49ed2f4aab0424ef4201e893ffd2da8a15"}
{"level":"debug","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c01f6d01ff5cabecb730588f8b6eaf49ed2f4aab0424ef4201e893ffd2da8a15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:01:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:01:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c01f6d01ff5cabecb730588f8b6eaf49ed2f4aab0424ef4201e893ffd2da8a15"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c01f6d01ff5cabecb730588f8b6eaf49ed2f4aab0424ef4201e893ffd2da8a15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c01f6d01ff5cabecb730588f8b6eaf49ed2f4aab0424ef4201e893ffd2da8a15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:01:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:01:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c01f6d01ff5cabecb730588f8b6eaf49ed2f4aab0424ef4201e893ffd2da8a15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c01f6d01ff5cabecb730588f8b6eaf49ed2f4aab0424ef4201e893ffd2da8a15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c01f6d01ff5cabecb730588f8b6eaf49ed2f4aab0424ef4201e893ffd2da8a15","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c01f6d01ff5cabecb730588f8b6eaf49ed2f4aab0424ef4201e893ffd2da8a15"}
{"level":"debug","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c01f6d01ff5cabecb730588f8b6eaf49ed2f4aab0424ef4201e893ffd2da8a15","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c01f6d01ff5cabecb730588f8b6eaf49ed2f4aab0424ef4201e893ffd2da8a15"}
{"level":"debug","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a4f3def323a222738b877f8df97dd138fe22800d9d1a420ff05bbcdb0e3f74b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:01:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:01:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a4f3def323a222738b877f8df97dd138fe22800d9d1a420ff05bbcdb0e3f74b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a4f3def323a222738b877f8df97dd138fe22800d9d1a420ff05bbcdb0e3f74b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a4f3def323a222738b877f8df97dd138fe22800d9d1a420ff05bbcdb0e3f74b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a4f3def323a222738b877f8df97dd138fe22800d9d1a420ff05bbcdb0e3f74b"}
{"level":"debug","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c01f6d01ff5cabecb730588f8b6eaf49ed2f4aab0424ef4201e893ffd2da8a15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:01:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:01:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c01f6d01ff5cabecb730588f8b6eaf49ed2f4aab0424ef4201e893ffd2da8a15"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a4f3def323a222738b877f8df97dd138fe22800d9d1a420ff05bbcdb0e3f74b"}
{"level":"info","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c01f6d01ff5cabecb730588f8b6eaf49ed2f4aab0424ef4201e893ffd2da8a15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a4f3def323a222738b877f8df97dd138fe22800d9d1a420ff05bbcdb0e3f74b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:01:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:01:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a4f3def323a222738b877f8df97dd138fe22800d9d1a420ff05bbcdb0e3f74b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a4f3def323a222738b877f8df97dd138fe22800d9d1a420ff05bbcdb0e3f74b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c01f6d01ff5cabecb730588f8b6eaf49ed2f4aab0424ef4201e893ffd2da8a15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:01:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:01:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c01f6d01ff5cabecb730588f8b6eaf49ed2f4aab0424ef4201e893ffd2da8a15"}
{"level":"info","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c01f6d01ff5cabecb730588f8b6eaf49ed2f4aab0424ef4201e893ffd2da8a15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a4f3def323a222738b877f8df97dd138fe22800d9d1a420ff05bbcdb0e3f74b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:01:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:01:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a4f3def323a222738b877f8df97dd138fe22800d9d1a420ff05bbcdb0e3f74b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c01f6d01ff5cabecb730588f8b6eaf49ed2f4aab0424ef4201e893ffd2da8a15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:01:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:01:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c01f6d01ff5cabecb730588f8b6eaf49ed2f4aab0424ef4201e893ffd2da8a15"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c01f6d01ff5cabecb730588f8b6eaf49ed2f4aab0424ef4201e893ffd2da8a15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a4f3def323a222738b877f8df97dd138fe22800d9d1a420ff05bbcdb0e3f74b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50858acd9c1e5697d36a1754b5f18f962da3ff4c865ff25bf3d7fc3c6031eadb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c01f6d01ff5cabecb730588f8b6eaf49ed2f4aab0424ef4201e893ffd2da8a15","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a4f3def323a222738b877f8df97dd138fe22800d9d1a420ff05bbcdb0e3f74b"}
{"level":"debug","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a4f3def323a222738b877f8df97dd138fe22800d9d1a420ff05bbcdb0e3f74b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:01:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:01:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a4f3def323a222738b877f8df97dd138fe22800d9d1a420ff05bbcdb0e3f74b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a4f3def323a222738b877f8df97dd138fe22800d9d1a420ff05bbcdb0e3f74b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a4f3def323a222738b877f8df97dd138fe22800d9d1a420ff05bbcdb0e3f74b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c01f6d01ff5cabecb730588f8b6eaf49ed2f4aab0424ef4201e893ffd2da8a15"}
{"level":"info","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50858acd9c1e5697d36a1754b5f18f962da3ff4c865ff25bf3d7fc3c6031eadb"}
{"level":"info","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a4f3def323a222738b877f8df97dd138fe22800d9d1a420ff05bbcdb0e3f74b"}
{"level":"debug","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8948faf7e501dca8f01ee1a4473dc3a1d72df0723947f3b80ab1abd1fd0f473c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:01:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:01:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8948faf7e501dca8f01ee1a4473dc3a1d72df0723947f3b80ab1abd1fd0f473c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8948faf7e501dca8f01ee1a4473dc3a1d72df0723947f3b80ab1abd1fd0f473c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8948faf7e501dca8f01ee1a4473dc3a1d72df0723947f3b80ab1abd1fd0f473c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8948faf7e501dca8f01ee1a4473dc3a1d72df0723947f3b80ab1abd1fd0f473c"}
{"level":"info","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8948faf7e501dca8f01ee1a4473dc3a1d72df0723947f3b80ab1abd1fd0f473c"}
{"level":"debug","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8948faf7e501dca8f01ee1a4473dc3a1d72df0723947f3b80ab1abd1fd0f473c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8948faf7e501dca8f01ee1a4473dc3a1d72df0723947f3b80ab1abd1fd0f473c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:01:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:01:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8948faf7e501dca8f01ee1a4473dc3a1d72df0723947f3b80ab1abd1fd0f473c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8948faf7e501dca8f01ee1a4473dc3a1d72df0723947f3b80ab1abd1fd0f473c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8948faf7e501dca8f01ee1a4473dc3a1d72df0723947f3b80ab1abd1fd0f473c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:01:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:01:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8948faf7e501dca8f01ee1a4473dc3a1d72df0723947f3b80ab1abd1fd0f473c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2117b62e0bf95d75eb6e079d84d79e7331de0256a1102af43ecff1f47dfd861b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8948faf7e501dca8f01ee1a4473dc3a1d72df0723947f3b80ab1abd1fd0f473c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9006bcd64adf2438e9d026356dd007d07411c3b54a067d90bbada1f2285442d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8948faf7e501dca8f01ee1a4473dc3a1d72df0723947f3b80ab1abd1fd0f473c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8948faf7e501dca8f01ee1a4473dc3a1d72df0723947f3b80ab1abd1fd0f473c"}
{"level":"debug","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8948faf7e501dca8f01ee1a4473dc3a1d72df0723947f3b80ab1abd1fd0f473c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:01:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:01:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8948faf7e501dca8f01ee1a4473dc3a1d72df0723947f3b80ab1abd1fd0f473c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2117b62e0bf95d75eb6e079d84d79e7331de0256a1102af43ecff1f47dfd861b"}
{"level":"info","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8948faf7e501dca8f01ee1a4473dc3a1d72df0723947f3b80ab1abd1fd0f473c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8948faf7e501dca8f01ee1a4473dc3a1d72df0723947f3b80ab1abd1fd0f473c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9006bcd64adf2438e9d026356dd007d07411c3b54a067d90bbada1f2285442d"}
{"level":"info","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8948faf7e501dca8f01ee1a4473dc3a1d72df0723947f3b80ab1abd1fd0f473c"}
{"level":"debug","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2822b38d0165d0c524b2d315301ea3b471fa28b41e65e19df70d32e33c0c2eaf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:01:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:01:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2822b38d0165d0c524b2d315301ea3b471fa28b41e65e19df70d32e33c0c2eaf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2822b38d0165d0c524b2d315301ea3b471fa28b41e65e19df70d32e33c0c2eaf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4eec1144d9482d87a06bda5dbdd375f360e50d89b65f20cb727bfbc6593b9ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2822b38d0165d0c524b2d315301ea3b471fa28b41e65e19df70d32e33c0c2eaf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2822b38d0165d0c524b2d315301ea3b471fa28b41e65e19df70d32e33c0c2eaf"}
{"level":"debug","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b620a81fb1078e87d0cb0e8abfd9d46f71a3a19dd0bfc99217dbd3e76f3bd13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2822b38d0165d0c524b2d315301ea3b471fa28b41e65e19df70d32e33c0c2eaf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:01:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:01:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2822b38d0165d0c524b2d315301ea3b471fa28b41e65e19df70d32e33c0c2eaf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4eec1144d9482d87a06bda5dbdd375f360e50d89b65f20cb727bfbc6593b9ca"}
{"level":"info","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2822b38d0165d0c524b2d315301ea3b471fa28b41e65e19df70d32e33c0c2eaf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da9cf299a03d1055c5626b48f4aaedb58d0531113b2b8d59c1844b5839cf33f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2822b38d0165d0c524b2d315301ea3b471fa28b41e65e19df70d32e33c0c2eaf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:01:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:01:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2822b38d0165d0c524b2d315301ea3b471fa28b41e65e19df70d32e33c0c2eaf"}
{"level":"info","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2822b38d0165d0c524b2d315301ea3b471fa28b41e65e19df70d32e33c0c2eaf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2822b38d0165d0c524b2d315301ea3b471fa28b41e65e19df70d32e33c0c2eaf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:01:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:01:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2822b38d0165d0c524b2d315301ea3b471fa28b41e65e19df70d32e33c0c2eaf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b620a81fb1078e87d0cb0e8abfd9d46f71a3a19dd0bfc99217dbd3e76f3bd13"}
{"level":"info","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2822b38d0165d0c524b2d315301ea3b471fa28b41e65e19df70d32e33c0c2eaf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2822b38d0165d0c524b2d315301ea3b471fa28b41e65e19df70d32e33c0c2eaf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:01:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:01:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2822b38d0165d0c524b2d315301ea3b471fa28b41e65e19df70d32e33c0c2eaf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2822b38d0165d0c524b2d315301ea3b471fa28b41e65e19df70d32e33c0c2eaf","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2822b38d0165d0c524b2d315301ea3b471fa28b41e65e19df70d32e33c0c2eaf\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2822b38d0165d0c524b2d315301ea3b471fa28b41e65e19df70d32e33c0c2eaf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2822b38d0165d0c524b2d315301ea3b471fa28b41e65e19df70d32e33c0c2eaf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5214077cb562c42bc1beb35cde4df1f746e5404b22b5daa90dce245b9cd6649","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da9cf299a03d1055c5626b48f4aaedb58d0531113b2b8d59c1844b5839cf33f9"}
{"level":"debug","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea1a3c9c2a30850c43560ffff1fead5f8aa5601d072a6cd0a2646a302d850ecc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2822b38d0165d0c524b2d315301ea3b471fa28b41e65e19df70d32e33c0c2eaf"}
{"level":"debug","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc58f91eded5862d2db38ee43b38f405d9a6027fa9d1534b269d3947f7b201b6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5214077cb562c42bc1beb35cde4df1f746e5404b22b5daa90dce245b9cd6649"}
{"level":"info","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea1a3c9c2a30850c43560ffff1fead5f8aa5601d072a6cd0a2646a302d850ecc"}
{"level":"info","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc58f91eded5862d2db38ee43b38f405d9a6027fa9d1534b269d3947f7b201b6"}
{"level":"debug","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"448ab29317cdf6a06bef2b199f6493f634200e3b9e364f7198fabb41b99880be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:01:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:01:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"448ab29317cdf6a06bef2b199f6493f634200e3b9e364f7198fabb41b99880be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"448ab29317cdf6a06bef2b199f6493f634200e3b9e364f7198fabb41b99880be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8927a2ee45d9fc408d76c2ff447b0054c86256bc418ec7ae66237ff3fb3558a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"448ab29317cdf6a06bef2b199f6493f634200e3b9e364f7198fabb41b99880be","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/448ab29317cdf6a06bef2b199f6493f634200e3b9e364f7198fabb41b99880be"}
{"level":"debug","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d4ac8eb928e625b80888df7c61f8cb8f5279f6dc2ee50e97d5fcb83e99b42a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"448ab29317cdf6a06bef2b199f6493f634200e3b9e364f7198fabb41b99880be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:01:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:01:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["448ab29317cdf6a06bef2b199f6493f634200e3b9e364f7198fabb41b99880be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8927a2ee45d9fc408d76c2ff447b0054c86256bc418ec7ae66237ff3fb3558a7"}
{"level":"info","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"448ab29317cdf6a06bef2b199f6493f634200e3b9e364f7198fabb41b99880be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85c8fb50939cc50a25e9718017ea814a409a682f81408b5cc01558af14435034","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"448ab29317cdf6a06bef2b199f6493f634200e3b9e364f7198fabb41b99880be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:01:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:01:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/448ab29317cdf6a06bef2b199f6493f634200e3b9e364f7198fabb41b99880be"}
{"level":"info","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"448ab29317cdf6a06bef2b199f6493f634200e3b9e364f7198fabb41b99880be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"448ab29317cdf6a06bef2b199f6493f634200e3b9e364f7198fabb41b99880be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:01:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:01:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["448ab29317cdf6a06bef2b199f6493f634200e3b9e364f7198fabb41b99880be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"448ab29317cdf6a06bef2b199f6493f634200e3b9e364f7198fabb41b99880be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"448ab29317cdf6a06bef2b199f6493f634200e3b9e364f7198fabb41b99880be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:01:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:01:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["448ab29317cdf6a06bef2b199f6493f634200e3b9e364f7198fabb41b99880be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d4ac8eb928e625b80888df7c61f8cb8f5279f6dc2ee50e97d5fcb83e99b42a9"}
{"level":"error","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"448ab29317cdf6a06bef2b199f6493f634200e3b9e364f7198fabb41b99880be","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"448ab29317cdf6a06bef2b199f6493f634200e3b9e364f7198fabb41b99880be\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"448ab29317cdf6a06bef2b199f6493f634200e3b9e364f7198fabb41b99880be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"448ab29317cdf6a06bef2b199f6493f634200e3b9e364f7198fabb41b99880be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"872855411184ec9089cef59b060aac86e543405cadd122ed2669b56ca3f6c07b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85c8fb50939cc50a25e9718017ea814a409a682f81408b5cc01558af14435034"}
{"level":"debug","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad753c29ffa48027e11eef114919383f68a798ef7935cf0e2fd118a5fa2ae0f9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/448ab29317cdf6a06bef2b199f6493f634200e3b9e364f7198fabb41b99880be"}
{"level":"info","ts":"2026-07-15T17:01:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/872855411184ec9089cef59b060aac86e543405cadd122ed2669b56ca3f6c07b"}
{"level":"info","ts":"2026-07-15T17:01:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad753c29ffa48027e11eef114919383f68a798ef7935cf0e2fd118a5fa2ae0f9"}
{"level":"info","ts":"2026-07-15T17:01:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"744ea08f-0f3b-4b68-9c20-08314d2b398b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:33620","PortSpecifier":{"PortValue":33620}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"744ea08f-0f3b-4b68-9c20-08314d2b398b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8269b5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T17:01:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"744ea08f-0f3b-4b68-9c20-08314d2b398b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:33620","PortSpecifier":{"PortValue":33620}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784134899,"nanos":514441938},"http":{"id":"744ea08f-0f3b-4b68-9c20-08314d2b398b","method":"POST","headers":{":authority":"e2e-shared-a-8269b5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:01:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"744ea08f-0f3b-4b68-9c20-08314d2b398b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T17:01:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"744ea08f-0f3b-4b68-9c20-08314d2b398b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2ffacb13-a3e0-46bc-98fe-52df4fec3861","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cb7ac727-7271-4758-b198-c4e61e072694"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2eae08074477"]}}
{"level":"debug","ts":"2026-07-15T17:01:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"744ea08f-0f3b-4b68-9c20-08314d2b398b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2eae08074477"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cb7ac727-7271-4758-b198-c4e61e072694"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2ffacb13-a3e0-46bc-98fe-52df4fec3861","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"091d01fc5bc6383a86d3f7d558c101e42d446b68ab6028635e10cb80a1788a0d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8269b5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:01:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"744ea08f-0f3b-4b68-9c20-08314d2b398b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:01:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"744ea08f-0f3b-4b68-9c20-08314d2b398b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:01:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"744ea08f-0f3b-4b68-9c20-08314d2b398b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8269b5/sub-test-model-8269b5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8269b5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:01:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"744ea08f-0f3b-4b68-9c20-08314d2b398b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T17:01:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"744ea08f-0f3b-4b68-9c20-08314d2b398b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T17:01:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"744ea08f-0f3b-4b68-9c20-08314d2b398b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T17:01:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"744ea08f-0f3b-4b68-9c20-08314d2b398b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T17:01:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"744ea08f-0f3b-4b68-9c20-08314d2b398b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T17:01:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"88bbf46d-d731-49eb-8312-8df87304f456","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:57292","PortSpecifier":{"PortValue":57292}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"88bbf46d-d731-49eb-8312-8df87304f456","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-021cd5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T17:01:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"88bbf46d-d731-49eb-8312-8df87304f456","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:57292","PortSpecifier":{"PortValue":57292}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784134899,"nanos":559517517},"http":{"id":"88bbf46d-d731-49eb-8312-8df87304f456","method":"POST","headers":{":authority":"e2e-shared-b-021cd5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:01:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"88bbf46d-d731-49eb-8312-8df87304f456","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T17:01:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"88bbf46d-d731-49eb-8312-8df87304f456","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2ffacb13-a3e0-46bc-98fe-52df4fec3861","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cb7ac727-7271-4758-b198-c4e61e072694"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2eae08074477"]}}
{"level":"debug","ts":"2026-07-15T17:01:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"88bbf46d-d731-49eb-8312-8df87304f456","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2eae08074477"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cb7ac727-7271-4758-b198-c4e61e072694"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2ffacb13-a3e0-46bc-98fe-52df4fec3861","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e9006bcd64adf2438e9d026356dd007d07411c3b54a067d90bbada1f2285442d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-021cd5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:01:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88bbf46d-d731-49eb-8312-8df87304f456","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:01:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88bbf46d-d731-49eb-8312-8df87304f456","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:01:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88bbf46d-d731-49eb-8312-8df87304f456","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-021cd5/sub-test-model-021cd5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-021cd5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:01:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"88bbf46d-d731-49eb-8312-8df87304f456","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T17:01:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"88bbf46d-d731-49eb-8312-8df87304f456","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T17:01:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"88bbf46d-d731-49eb-8312-8df87304f456","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T17:01:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"88bbf46d-d731-49eb-8312-8df87304f456","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T17:01:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"88bbf46d-d731-49eb-8312-8df87304f456","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T17:01:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b30ad91e-ac73-47e2-a449-8c0fcaa98c32","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:33626","PortSpecifier":{"PortValue":33626}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b30ad91e-ac73-47e2-a449-8c0fcaa98c32","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-8269b5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T17:01:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b30ad91e-ac73-47e2-a449-8c0fcaa98c32","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:33626","PortSpecifier":{"PortValue":33626}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784134899,"nanos":601251228},"http":{"id":"b30ad91e-ac73-47e2-a449-8c0fcaa98c32","method":"GET","headers":{":authority":"e2e-shared-a-8269b5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:01:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b30ad91e-ac73-47e2-a449-8c0fcaa98c32","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-MQxizeyF73Jcvu49_EJ3uzIBy3M8AMCuZVRnf4zR1KWdrCKkyvuvTFpV2RVJ"}
{"level":"debug","ts":"2026-07-15T17:01:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b30ad91e-ac73-47e2-a449-8c0fcaa98c32","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8269b5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-MQxizeyF73Jcvu49_EJ3uzIBy3M8AMCuZVRnf4zR1KWdrCKkyvuvTFpV2RVJ\"}"}
{"level":"debug","ts":"2026-07-15T17:01:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b30ad91e-ac73-47e2-a449-8c0fcaa98c32","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8269b5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a66c1ecf-ea8e-472b-a03b-c6a2aada3c22","keyName":"e2e-sub-iso-a2bab4","subscription":"e2e-a-only-035a2c","tenant":"e2e-shared-a-8269b5","userId":"a66c1ecf-ea8e-472b-a03b-c6a2aada3c22","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T17:01:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b30ad91e-ac73-47e2-a449-8c0fcaa98c32","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:01:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b30ad91e-ac73-47e2-a449-8c0fcaa98c32","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:01:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b30ad91e-ac73-47e2-a449-8c0fcaa98c32","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:01:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b30ad91e-ac73-47e2-a449-8c0fcaa98c32","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8269b5/sub-test-model-8269b5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8269b5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:01:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b30ad91e-ac73-47e2-a449-8c0fcaa98c32","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-15T17:01:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b30ad91e-ac73-47e2-a449-8c0fcaa98c32","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T17:01:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b30ad91e-ac73-47e2-a449-8c0fcaa98c32","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T17:01:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b30ad91e-ac73-47e2-a449-8c0fcaa98c32","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-035a2c"}
{"level":"info","ts":"2026-07-15T17:01:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b30ad91e-ac73-47e2-a449-8c0fcaa98c32","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T17:01:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b30ad91e-ac73-47e2-a449-8c0fcaa98c32","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T17:01:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"48696de4-f13d-4ec6-8d83-ff594b34abbd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:57302","PortSpecifier":{"PortValue":57302}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"48696de4-f13d-4ec6-8d83-ff594b34abbd","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-021cd5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T17:01:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"48696de4-f13d-4ec6-8d83-ff594b34abbd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:57302","PortSpecifier":{"PortValue":57302}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784134899,"nanos":634286915},"http":{"id":"48696de4-f13d-4ec6-8d83-ff594b34abbd","method":"GET","headers":{":authority":"e2e-shared-b-021cd5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:01:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"48696de4-f13d-4ec6-8d83-ff594b34abbd","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ucbuJq0md0m5xgrp_EuwVSW67NbfQn6lzxynQWcSRQvJZKu9lD5SkmdYDPuL"}
{"level":"debug","ts":"2026-07-15T17:01:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"48696de4-f13d-4ec6-8d83-ff594b34abbd","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-021cd5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ucbuJq0md0m5xgrp_EuwVSW67NbfQn6lzxynQWcSRQvJZKu9lD5SkmdYDPuL\"}"}
{"level":"debug","ts":"2026-07-15T17:01:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"48696de4-f13d-4ec6-8d83-ff594b34abbd","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-021cd5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5edbea06-5515-476b-9a03-f69d851d70bc","keyName":"e2e-sub-iso-d4df5c","subscription":"e2e-b-only-035a2c","tenant":"e2e-shared-b-021cd5","userId":"5edbea06-5515-476b-9a03-f69d851d70bc","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T17:01:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"48696de4-f13d-4ec6-8d83-ff594b34abbd","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:01:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"48696de4-f13d-4ec6-8d83-ff594b34abbd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:01:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"48696de4-f13d-4ec6-8d83-ff594b34abbd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:01:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"48696de4-f13d-4ec6-8d83-ff594b34abbd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-021cd5/sub-test-model-021cd5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-021cd5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:01:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"48696de4-f13d-4ec6-8d83-ff594b34abbd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-15T17:01:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"48696de4-f13d-4ec6-8d83-ff594b34abbd","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T17:01:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"48696de4-f13d-4ec6-8d83-ff594b34abbd","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-035a2c"}
{"level":"debug","ts":"2026-07-15T17:01:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"48696de4-f13d-4ec6-8d83-ff594b34abbd","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T17:01:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"48696de4-f13d-4ec6-8d83-ff594b34abbd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T17:01:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"48696de4-f13d-4ec6-8d83-ff594b34abbd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T17:01:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a4865a1f-db55-4a37-a146-3f05ae76fcf1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:44540","PortSpecifier":{"PortValue":44540}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a4865a1f-db55-4a37-a146-3f05ae76fcf1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8269b5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T17:01:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a4865a1f-db55-4a37-a146-3f05ae76fcf1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:44540","PortSpecifier":{"PortValue":44540}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784134910,"nanos":95742607},"http":{"id":"a4865a1f-db55-4a37-a146-3f05ae76fcf1","method":"POST","headers":{":authority":"e2e-shared-a-8269b5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:01:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a4865a1f-db55-4a37-a146-3f05ae76fcf1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T17:01:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a4865a1f-db55-4a37-a146-3f05ae76fcf1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2ffacb13-a3e0-46bc-98fe-52df4fec3861","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cb7ac727-7271-4758-b198-c4e61e072694"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2eae08074477"]}}
{"level":"debug","ts":"2026-07-15T17:01:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a4865a1f-db55-4a37-a146-3f05ae76fcf1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2eae08074477"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cb7ac727-7271-4758-b198-c4e61e072694"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2ffacb13-a3e0-46bc-98fe-52df4fec3861","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"091d01fc5bc6383a86d3f7d558c101e42d446b68ab6028635e10cb80a1788a0d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8269b5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:01:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a4865a1f-db55-4a37-a146-3f05ae76fcf1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:01:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a4865a1f-db55-4a37-a146-3f05ae76fcf1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:01:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a4865a1f-db55-4a37-a146-3f05ae76fcf1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8269b5/sub-test-model-8269b5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8269b5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:01:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a4865a1f-db55-4a37-a146-3f05ae76fcf1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T17:01:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a4865a1f-db55-4a37-a146-3f05ae76fcf1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T17:01:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a4865a1f-db55-4a37-a146-3f05ae76fcf1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T17:01:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a4865a1f-db55-4a37-a146-3f05ae76fcf1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T17:01:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a4865a1f-db55-4a37-a146-3f05ae76fcf1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T17:01:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"747c1001-a197-43ca-a4cf-febb6a5fcb63","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:41176","PortSpecifier":{"PortValue":41176}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"747c1001-a197-43ca-a4cf-febb6a5fcb63","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-021cd5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T17:01:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"747c1001-a197-43ca-a4cf-febb6a5fcb63","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:41176","PortSpecifier":{"PortValue":41176}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784134910,"nanos":141669635},"http":{"id":"747c1001-a197-43ca-a4cf-febb6a5fcb63","method":"POST","headers":{":authority":"e2e-shared-b-021cd5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:01:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"747c1001-a197-43ca-a4cf-febb6a5fcb63","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T17:01:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"747c1001-a197-43ca-a4cf-febb6a5fcb63","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2ffacb13-a3e0-46bc-98fe-52df4fec3861","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cb7ac727-7271-4758-b198-c4e61e072694"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2eae08074477"]}}
{"level":"debug","ts":"2026-07-15T17:01:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"747c1001-a197-43ca-a4cf-febb6a5fcb63","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2eae08074477"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cb7ac727-7271-4758-b198-c4e61e072694"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2ffacb13-a3e0-46bc-98fe-52df4fec3861","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e9006bcd64adf2438e9d026356dd007d07411c3b54a067d90bbada1f2285442d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-021cd5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:01:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"747c1001-a197-43ca-a4cf-febb6a5fcb63","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:01:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"747c1001-a197-43ca-a4cf-febb6a5fcb63","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:01:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"747c1001-a197-43ca-a4cf-febb6a5fcb63","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-021cd5/sub-test-model-021cd5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-021cd5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:01:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"747c1001-a197-43ca-a4cf-febb6a5fcb63","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T17:01:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"747c1001-a197-43ca-a4cf-febb6a5fcb63","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T17:01:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"747c1001-a197-43ca-a4cf-febb6a5fcb63","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T17:01:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"747c1001-a197-43ca-a4cf-febb6a5fcb63","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T17:01:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"747c1001-a197-43ca-a4cf-febb6a5fcb63","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T17:01:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1514c57c-8678-49cf-9a83-93caf36e7bc4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:44552","PortSpecifier":{"PortValue":44552}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1514c57c-8678-49cf-9a83-93caf36e7bc4","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-8269b5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T17:01:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1514c57c-8678-49cf-9a83-93caf36e7bc4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:44552","PortSpecifier":{"PortValue":44552}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784134910,"nanos":178300942},"http":{"id":"1514c57c-8678-49cf-9a83-93caf36e7bc4","method":"POST","headers":{":authority":"e2e-shared-a-8269b5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:01:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1514c57c-8678-49cf-9a83-93caf36e7bc4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-wrvpsyhm9Zo0uGrU_lDmucELbwxatlq63yGDhBIHgQyVE914Yha62KjlnIaN"}
{"level":"debug","ts":"2026-07-15T17:01:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1514c57c-8678-49cf-9a83-93caf36e7bc4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8269b5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-wrvpsyhm9Zo0uGrU_lDmucELbwxatlq63yGDhBIHgQyVE914Yha62KjlnIaN\"}"}
{"level":"debug","ts":"2026-07-15T17:01:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1514c57c-8678-49cf-9a83-93caf36e7bc4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8269b5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9105d55f-9e39-44d8-80af-c8749fb37cbb","keyName":"e2e-sub-iso-b6e7a1","subscription":"e2e-shared-sub-b07f61","tenant":"e2e-shared-a-8269b5","userId":"9105d55f-9e39-44d8-80af-c8749fb37cbb","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T17:01:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1514c57c-8678-49cf-9a83-93caf36e7bc4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:01:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1514c57c-8678-49cf-9a83-93caf36e7bc4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:01:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1514c57c-8678-49cf-9a83-93caf36e7bc4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:01:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1514c57c-8678-49cf-9a83-93caf36e7bc4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8269b5/sub-test-model-8269b5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8269b5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:01:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1514c57c-8678-49cf-9a83-93caf36e7bc4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-15T17:01:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1514c57c-8678-49cf-9a83-93caf36e7bc4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T17:01:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1514c57c-8678-49cf-9a83-93caf36e7bc4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T17:01:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1514c57c-8678-49cf-9a83-93caf36e7bc4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-b07f61"}
{"level":"info","ts":"2026-07-15T17:01:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1514c57c-8678-49cf-9a83-93caf36e7bc4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T17:01:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1514c57c-8678-49cf-9a83-93caf36e7bc4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T17:01:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"36171a8a-253d-47c5-80d4-582995ed64ca","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:41180","PortSpecifier":{"PortValue":41180}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"36171a8a-253d-47c5-80d4-582995ed64ca","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-021cd5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T17:01:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"36171a8a-253d-47c5-80d4-582995ed64ca","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:41180","PortSpecifier":{"PortValue":41180}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784134910,"nanos":217242361},"http":{"id":"36171a8a-253d-47c5-80d4-582995ed64ca","method":"POST","headers":{":authority":"e2e-shared-b-021cd5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:01:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"36171a8a-253d-47c5-80d4-582995ed64ca","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-YDLZXhiA7n4U4JbZ_1lfQgzVtgBY45BrBgYirJb4J4EXC8CcXEqkRq36qZcR"}
{"level":"debug","ts":"2026-07-15T17:01:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"36171a8a-253d-47c5-80d4-582995ed64ca","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-021cd5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-YDLZXhiA7n4U4JbZ_1lfQgzVtgBY45BrBgYirJb4J4EXC8CcXEqkRq36qZcR\"}"}
{"level":"debug","ts":"2026-07-15T17:01:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"36171a8a-253d-47c5-80d4-582995ed64ca","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-021cd5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"efa3a0b8-2cdd-4966-957d-f417722f993e","keyName":"e2e-sub-iso-aaa9a7","subscription":"e2e-shared-sub-b07f61","tenant":"e2e-shared-b-021cd5","userId":"efa3a0b8-2cdd-4966-957d-f417722f993e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T17:01:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"36171a8a-253d-47c5-80d4-582995ed64ca","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:01:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"36171a8a-253d-47c5-80d4-582995ed64ca","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:01:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"36171a8a-253d-47c5-80d4-582995ed64ca","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:01:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"36171a8a-253d-47c5-80d4-582995ed64ca","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-021cd5/sub-test-model-021cd5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-021cd5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:01:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"36171a8a-253d-47c5-80d4-582995ed64ca","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-15T17:01:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"36171a8a-253d-47c5-80d4-582995ed64ca","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T17:01:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"36171a8a-253d-47c5-80d4-582995ed64ca","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-b07f61"}
{"level":"debug","ts":"2026-07-15T17:01:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"36171a8a-253d-47c5-80d4-582995ed64ca","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T17:01:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"36171a8a-253d-47c5-80d4-582995ed64ca","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T17:01:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"36171a8a-253d-47c5-80d4-582995ed64ca","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T17:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c01f6d01ff5cabecb730588f8b6eaf49ed2f4aab0424ef4201e893ffd2da8a15"}
{"level":"info","ts":"2026-07-15T17:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a3c77f0139275cfd738c1551115aa2b145e7af2bab57c5cf6152868060c79666"}
{"level":"info","ts":"2026-07-15T17:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b5214077cb562c42bc1beb35cde4df1f746e5404b22b5daa90dce245b9cd6649"}
{"level":"info","ts":"2026-07-15T17:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8d4ac8eb928e625b80888df7c61f8cb8f5279f6dc2ee50e97d5fcb83e99b42a9"}
{"level":"info","ts":"2026-07-15T17:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ea1a3c9c2a30850c43560ffff1fead5f8aa5601d072a6cd0a2646a302d850ecc"}
{"level":"info","ts":"2026-07-15T17:01:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0569fd88e03634963bd47943e7eab3cf3bcc1f06d312f50cae2ec55c71c3829a"}
{"level":"info","ts":"2026-07-15T17:01:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3a4f3def323a222738b877f8df97dd138fe22800d9d1a420ff05bbcdb0e3f74b"}
{"level":"info","ts":"2026-07-15T17:01:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8927a2ee45d9fc408d76c2ff447b0054c86256bc418ec7ae66237ff3fb3558a7"}
{"level":"info","ts":"2026-07-15T17:01:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/50858acd9c1e5697d36a1754b5f18f962da3ff4c865ff25bf3d7fc3c6031eadb"}
{"level":"info","ts":"2026-07-15T17:01:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cc58f91eded5862d2db38ee43b38f405d9a6027fa9d1534b269d3947f7b201b6"}
{"level":"info","ts":"2026-07-15T17:01:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/69bd01f0fc2ac57a2465546c687a9d1be23ca9b01b42340f324eb78ac770baeb"}
{"level":"info","ts":"2026-07-15T17:01:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2117b62e0bf95d75eb6e079d84d79e7331de0256a1102af43ecff1f47dfd861b"}
{"level":"info","ts":"2026-07-15T17:01:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ad753c29ffa48027e11eef114919383f68a798ef7935cf0e2fd118a5fa2ae0f9"}
{"level":"info","ts":"2026-07-15T17:01:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/33e980053aa506ceb61ba5ca7a787291d8bc4e3a79de88fab1400978207623a1"}
{"level":"info","ts":"2026-07-15T17:01:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2822b38d0165d0c524b2d315301ea3b471fa28b41e65e19df70d32e33c0c2eaf"}
{"level":"info","ts":"2026-07-15T17:01:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8948faf7e501dca8f01ee1a4473dc3a1d72df0723947f3b80ab1abd1fd0f473c"}
{"level":"debug","ts":"2026-07-15T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9083306e26f176b594b7e92ec518c092fe2bf96c02cd810fb433d62b2c38c5c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:02:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:02:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9083306e26f176b594b7e92ec518c092fe2bf96c02cd810fb433d62b2c38c5c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9083306e26f176b594b7e92ec518c092fe2bf96c02cd810fb433d62b2c38c5c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9083306e26f176b594b7e92ec518c092fe2bf96c02cd810fb433d62b2c38c5c4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9083306e26f176b594b7e92ec518c092fe2bf96c02cd810fb433d62b2c38c5c4"}
{"level":"debug","ts":"2026-07-15T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9083306e26f176b594b7e92ec518c092fe2bf96c02cd810fb433d62b2c38c5c4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9083306e26f176b594b7e92ec518c092fe2bf96c02cd810fb433d62b2c38c5c4"}
{"level":"debug","ts":"2026-07-15T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9083306e26f176b594b7e92ec518c092fe2bf96c02cd810fb433d62b2c38c5c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:02:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:02:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9083306e26f176b594b7e92ec518c092fe2bf96c02cd810fb433d62b2c38c5c4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9083306e26f176b594b7e92ec518c092fe2bf96c02cd810fb433d62b2c38c5c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9083306e26f176b594b7e92ec518c092fe2bf96c02cd810fb433d62b2c38c5c4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9083306e26f176b594b7e92ec518c092fe2bf96c02cd810fb433d62b2c38c5c4"}
{"level":"debug","ts":"2026-07-15T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4ea7c74c5b3f881037054272857f4a685987082fafca1640b2ddf7faad451d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:02:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:02:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4ea7c74c5b3f881037054272857f4a685987082fafca1640b2ddf7faad451d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4ea7c74c5b3f881037054272857f4a685987082fafca1640b2ddf7faad451d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4ea7c74c5b3f881037054272857f4a685987082fafca1640b2ddf7faad451d4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4ea7c74c5b3f881037054272857f4a685987082fafca1640b2ddf7faad451d4"}
{"level":"debug","ts":"2026-07-15T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4ea7c74c5b3f881037054272857f4a685987082fafca1640b2ddf7faad451d4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4ea7c74c5b3f881037054272857f4a685987082fafca1640b2ddf7faad451d4"}
{"level":"debug","ts":"2026-07-15T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4ea7c74c5b3f881037054272857f4a685987082fafca1640b2ddf7faad451d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:02:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:02:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c4ea7c74c5b3f881037054272857f4a685987082fafca1640b2ddf7faad451d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4ea7c74c5b3f881037054272857f4a685987082fafca1640b2ddf7faad451d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4ea7c74c5b3f881037054272857f4a685987082fafca1640b2ddf7faad451d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:02:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:02:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4ea7c74c5b3f881037054272857f4a685987082fafca1640b2ddf7faad451d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08e991a3026b92613914c7bfe28710cd1e49447575dbbd1fb615dbd35a740d3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:02:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:02:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4ea7c74c5b3f881037054272857f4a685987082fafca1640b2ddf7faad451d4"}
{"level":"info","ts":"2026-07-15T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08e991a3026b92613914c7bfe28710cd1e49447575dbbd1fb615dbd35a740d3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4ea7c74c5b3f881037054272857f4a685987082fafca1640b2ddf7faad451d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:02:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:02:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c4ea7c74c5b3f881037054272857f4a685987082fafca1640b2ddf7faad451d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08e991a3026b92613914c7bfe28710cd1e49447575dbbd1fb615dbd35a740d3d"}
{"level":"info","ts":"2026-07-15T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4ea7c74c5b3f881037054272857f4a685987082fafca1640b2ddf7faad451d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08e991a3026b92613914c7bfe28710cd1e49447575dbbd1fb615dbd35a740d3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:02:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:02:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["08e991a3026b92613914c7bfe28710cd1e49447575dbbd1fb615dbd35a740d3d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08e991a3026b92613914c7bfe28710cd1e49447575dbbd1fb615dbd35a740d3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4ea7c74c5b3f881037054272857f4a685987082fafca1640b2ddf7faad451d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:02:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:02:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4ea7c74c5b3f881037054272857f4a685987082fafca1640b2ddf7faad451d4"}
{"level":"info","ts":"2026-07-15T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4ea7c74c5b3f881037054272857f4a685987082fafca1640b2ddf7faad451d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08e991a3026b92613914c7bfe28710cd1e49447575dbbd1fb615dbd35a740d3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:02:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:02:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08e991a3026b92613914c7bfe28710cd1e49447575dbbd1fb615dbd35a740d3d"}
{"level":"info","ts":"2026-07-15T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08e991a3026b92613914c7bfe28710cd1e49447575dbbd1fb615dbd35a740d3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4ea7c74c5b3f881037054272857f4a685987082fafca1640b2ddf7faad451d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08e991a3026b92613914c7bfe28710cd1e49447575dbbd1fb615dbd35a740d3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:02:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:02:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["08e991a3026b92613914c7bfe28710cd1e49447575dbbd1fb615dbd35a740d3d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08e991a3026b92613914c7bfe28710cd1e49447575dbbd1fb615dbd35a740d3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4ea7c74c5b3f881037054272857f4a685987082fafca1640b2ddf7faad451d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08e991a3026b92613914c7bfe28710cd1e49447575dbbd1fb615dbd35a740d3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:02:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:02:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["08e991a3026b92613914c7bfe28710cd1e49447575dbbd1fb615dbd35a740d3d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4ea7c74c5b3f881037054272857f4a685987082fafca1640b2ddf7faad451d4"}
{"level":"error","ts":"2026-07-15T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"08e991a3026b92613914c7bfe28710cd1e49447575dbbd1fb615dbd35a740d3d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"08e991a3026b92613914c7bfe28710cd1e49447575dbbd1fb615dbd35a740d3d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08e991a3026b92613914c7bfe28710cd1e49447575dbbd1fb615dbd35a740d3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:02:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:02:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08e991a3026b92613914c7bfe28710cd1e49447575dbbd1fb615dbd35a740d3d"}
{"level":"info","ts":"2026-07-15T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08e991a3026b92613914c7bfe28710cd1e49447575dbbd1fb615dbd35a740d3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4ea7c74c5b3f881037054272857f4a685987082fafca1640b2ddf7faad451d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:02:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:02:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c4ea7c74c5b3f881037054272857f4a685987082fafca1640b2ddf7faad451d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4ea7c74c5b3f881037054272857f4a685987082fafca1640b2ddf7faad451d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08e991a3026b92613914c7bfe28710cd1e49447575dbbd1fb615dbd35a740d3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4ea7c74c5b3f881037054272857f4a685987082fafca1640b2ddf7faad451d4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08e991a3026b92613914c7bfe28710cd1e49447575dbbd1fb615dbd35a740d3d"}
{"level":"debug","ts":"2026-07-15T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08e991a3026b92613914c7bfe28710cd1e49447575dbbd1fb615dbd35a740d3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:02:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:02:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["08e991a3026b92613914c7bfe28710cd1e49447575dbbd1fb615dbd35a740d3d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4ea7c74c5b3f881037054272857f4a685987082fafca1640b2ddf7faad451d4"}
{"level":"info","ts":"2026-07-15T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08e991a3026b92613914c7bfe28710cd1e49447575dbbd1fb615dbd35a740d3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08e991a3026b92613914c7bfe28710cd1e49447575dbbd1fb615dbd35a740d3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:02:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:02:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08e991a3026b92613914c7bfe28710cd1e49447575dbbd1fb615dbd35a740d3d"}
{"level":"info","ts":"2026-07-15T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08e991a3026b92613914c7bfe28710cd1e49447575dbbd1fb615dbd35a740d3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08e991a3026b92613914c7bfe28710cd1e49447575dbbd1fb615dbd35a740d3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08e991a3026b92613914c7bfe28710cd1e49447575dbbd1fb615dbd35a740d3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d31e8d96f10ef2d59d7705a46ed064531ee77d02f1f8ca6e11825652ed46083e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:02:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:02:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08e991a3026b92613914c7bfe28710cd1e49447575dbbd1fb615dbd35a740d3d"}
{"level":"info","ts":"2026-07-15T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d31e8d96f10ef2d59d7705a46ed064531ee77d02f1f8ca6e11825652ed46083e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08e991a3026b92613914c7bfe28710cd1e49447575dbbd1fb615dbd35a740d3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:02:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:02:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["08e991a3026b92613914c7bfe28710cd1e49447575dbbd1fb615dbd35a740d3d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08e991a3026b92613914c7bfe28710cd1e49447575dbbd1fb615dbd35a740d3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a59bd9f5b78b051b344fb63bc986bb10fc4f19f795a3963c7026f70569489a0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:02:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:02:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d31e8d96f10ef2d59d7705a46ed064531ee77d02f1f8ca6e11825652ed46083e"}
{"level":"info","ts":"2026-07-15T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a59bd9f5b78b051b344fb63bc986bb10fc4f19f795a3963c7026f70569489a0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d31e8d96f10ef2d59d7705a46ed064531ee77d02f1f8ca6e11825652ed46083e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:02:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:02:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d31e8d96f10ef2d59d7705a46ed064531ee77d02f1f8ca6e11825652ed46083e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d31e8d96f10ef2d59d7705a46ed064531ee77d02f1f8ca6e11825652ed46083e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08e991a3026b92613914c7bfe28710cd1e49447575dbbd1fb615dbd35a740d3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:02:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:02:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08e991a3026b92613914c7bfe28710cd1e49447575dbbd1fb615dbd35a740d3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a59bd9f5b78b051b344fb63bc986bb10fc4f19f795a3963c7026f70569489a0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d31e8d96f10ef2d59d7705a46ed064531ee77d02f1f8ca6e11825652ed46083e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08e991a3026b92613914c7bfe28710cd1e49447575dbbd1fb615dbd35a740d3d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08e991a3026b92613914c7bfe28710cd1e49447575dbbd1fb615dbd35a740d3d"}
{"level":"debug","ts":"2026-07-15T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08e991a3026b92613914c7bfe28710cd1e49447575dbbd1fb615dbd35a740d3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:02:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:02:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["08e991a3026b92613914c7bfe28710cd1e49447575dbbd1fb615dbd35a740d3d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08e991a3026b92613914c7bfe28710cd1e49447575dbbd1fb615dbd35a740d3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a59bd9f5b78b051b344fb63bc986bb10fc4f19f795a3963c7026f70569489a0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:02:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:02:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a59bd9f5b78b051b344fb63bc986bb10fc4f19f795a3963c7026f70569489a0f"}
{"level":"info","ts":"2026-07-15T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a59bd9f5b78b051b344fb63bc986bb10fc4f19f795a3963c7026f70569489a0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08e991a3026b92613914c7bfe28710cd1e49447575dbbd1fb615dbd35a740d3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a59bd9f5b78b051b344fb63bc986bb10fc4f19f795a3963c7026f70569489a0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:02:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:02:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a59bd9f5b78b051b344fb63bc986bb10fc4f19f795a3963c7026f70569489a0f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d31e8d96f10ef2d59d7705a46ed064531ee77d02f1f8ca6e11825652ed46083e"}
{"level":"info","ts":"2026-07-15T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a59bd9f5b78b051b344fb63bc986bb10fc4f19f795a3963c7026f70569489a0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a59bd9f5b78b051b344fb63bc986bb10fc4f19f795a3963c7026f70569489a0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a59bd9f5b78b051b344fb63bc986bb10fc4f19f795a3963c7026f70569489a0f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08e991a3026b92613914c7bfe28710cd1e49447575dbbd1fb615dbd35a740d3d"}
{"level":"info","ts":"2026-07-15T17:02:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a59bd9f5b78b051b344fb63bc986bb10fc4f19f795a3963c7026f70569489a0f"}
{"level":"debug","ts":"2026-07-15T17:02:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c307ad20dfd50d64e796cc96e335f562205f6f4ad85908710421a6ca5f67fd38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:02:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:02:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:02:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c307ad20dfd50d64e796cc96e335f562205f6f4ad85908710421a6ca5f67fd38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c307ad20dfd50d64e796cc96e335f562205f6f4ad85908710421a6ca5f67fd38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:02:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:02:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:02:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c307ad20dfd50d64e796cc96e335f562205f6f4ad85908710421a6ca5f67fd38"}
{"level":"info","ts":"2026-07-15T17:02:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c307ad20dfd50d64e796cc96e335f562205f6f4ad85908710421a6ca5f67fd38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c307ad20dfd50d64e796cc96e335f562205f6f4ad85908710421a6ca5f67fd38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:02:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:02:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-15T17:02:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c307ad20dfd50d64e796cc96e335f562205f6f4ad85908710421a6ca5f67fd38","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c307ad20dfd50d64e796cc96e335f562205f6f4ad85908710421a6ca5f67fd38\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T17:02:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c307ad20dfd50d64e796cc96e335f562205f6f4ad85908710421a6ca5f67fd38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c307ad20dfd50d64e796cc96e335f562205f6f4ad85908710421a6ca5f67fd38","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:02:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c307ad20dfd50d64e796cc96e335f562205f6f4ad85908710421a6ca5f67fd38"}
{"level":"info","ts":"2026-07-15T17:02:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c307ad20dfd50d64e796cc96e335f562205f6f4ad85908710421a6ca5f67fd38"}
{"level":"debug","ts":"2026-07-15T17:02:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"876c145bd94ac961217089dc79d523eb4e7cb731890a15cc95867167efd5a3fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:02:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:02:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:02:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"876c145bd94ac961217089dc79d523eb4e7cb731890a15cc95867167efd5a3fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"462a5176a363a2974c591fb8908094d965410f93ee48cad8ac0284978ef3e494","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:02:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:02:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:02:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/876c145bd94ac961217089dc79d523eb4e7cb731890a15cc95867167efd5a3fc"}
{"level":"info","ts":"2026-07-15T17:02:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"462a5176a363a2974c591fb8908094d965410f93ee48cad8ac0284978ef3e494","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"876c145bd94ac961217089dc79d523eb4e7cb731890a15cc95867167efd5a3fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:02:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:02:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["876c145bd94ac961217089dc79d523eb4e7cb731890a15cc95867167efd5a3fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:02:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/462a5176a363a2974c591fb8908094d965410f93ee48cad8ac0284978ef3e494"}
{"level":"info","ts":"2026-07-15T17:02:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"876c145bd94ac961217089dc79d523eb4e7cb731890a15cc95867167efd5a3fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c307ad20dfd50d64e796cc96e335f562205f6f4ad85908710421a6ca5f67fd38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:02:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:02:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c307ad20dfd50d64e796cc96e335f562205f6f4ad85908710421a6ca5f67fd38"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:02:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/876c145bd94ac961217089dc79d523eb4e7cb731890a15cc95867167efd5a3fc"}
{"level":"info","ts":"2026-07-15T17:02:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c307ad20dfd50d64e796cc96e335f562205f6f4ad85908710421a6ca5f67fd38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"462a5176a363a2974c591fb8908094d965410f93ee48cad8ac0284978ef3e494","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:02:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:02:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:02:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"462a5176a363a2974c591fb8908094d965410f93ee48cad8ac0284978ef3e494","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"876c145bd94ac961217089dc79d523eb4e7cb731890a15cc95867167efd5a3fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c307ad20dfd50d64e796cc96e335f562205f6f4ad85908710421a6ca5f67fd38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"462a5176a363a2974c591fb8908094d965410f93ee48cad8ac0284978ef3e494","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:02:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/462a5176a363a2974c591fb8908094d965410f93ee48cad8ac0284978ef3e494"}
{"level":"debug","ts":"2026-07-15T17:02:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"462a5176a363a2974c591fb8908094d965410f93ee48cad8ac0284978ef3e494","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:02:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:02:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["462a5176a363a2974c591fb8908094d965410f93ee48cad8ac0284978ef3e494"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:02:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"462a5176a363a2974c591fb8908094d965410f93ee48cad8ac0284978ef3e494","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"462a5176a363a2974c591fb8908094d965410f93ee48cad8ac0284978ef3e494","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:02:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/876c145bd94ac961217089dc79d523eb4e7cb731890a15cc95867167efd5a3fc"}
{"level":"info","ts":"2026-07-15T17:02:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c307ad20dfd50d64e796cc96e335f562205f6f4ad85908710421a6ca5f67fd38"}
{"level":"info","ts":"2026-07-15T17:02:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/462a5176a363a2974c591fb8908094d965410f93ee48cad8ac0284978ef3e494"}
{"level":"debug","ts":"2026-07-15T17:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f444a1bab9252b7e98254bfee567513f703ad36344b00b94e39aa93e8dec47b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:02:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:02:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f444a1bab9252b7e98254bfee567513f703ad36344b00b94e39aa93e8dec47b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f444a1bab9252b7e98254bfee567513f703ad36344b00b94e39aa93e8dec47b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f444a1bab9252b7e98254bfee567513f703ad36344b00b94e39aa93e8dec47b"}
{"level":"debug","ts":"2026-07-15T17:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f444a1bab9252b7e98254bfee567513f703ad36344b00b94e39aa93e8dec47b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f444a1bab9252b7e98254bfee567513f703ad36344b00b94e39aa93e8dec47b"}
{"level":"debug","ts":"2026-07-15T17:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f444a1bab9252b7e98254bfee567513f703ad36344b00b94e39aa93e8dec47b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:02:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:02:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7f444a1bab9252b7e98254bfee567513f703ad36344b00b94e39aa93e8dec47b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f444a1bab9252b7e98254bfee567513f703ad36344b00b94e39aa93e8dec47b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f444a1bab9252b7e98254bfee567513f703ad36344b00b94e39aa93e8dec47b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:02:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:02:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f444a1bab9252b7e98254bfee567513f703ad36344b00b94e39aa93e8dec47b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f444a1bab9252b7e98254bfee567513f703ad36344b00b94e39aa93e8dec47b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f444a1bab9252b7e98254bfee567513f703ad36344b00b94e39aa93e8dec47b"}
{"level":"debug","ts":"2026-07-15T17:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f444a1bab9252b7e98254bfee567513f703ad36344b00b94e39aa93e8dec47b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0504704c0a00015ef7c60945960e2592656d44647ceb5a62470316983206e667","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:02:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:02:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f444a1bab9252b7e98254bfee567513f703ad36344b00b94e39aa93e8dec47b"}
{"level":"info","ts":"2026-07-15T17:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0504704c0a00015ef7c60945960e2592656d44647ceb5a62470316983206e667","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f444a1bab9252b7e98254bfee567513f703ad36344b00b94e39aa93e8dec47b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:02:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:02:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7f444a1bab9252b7e98254bfee567513f703ad36344b00b94e39aa93e8dec47b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f444a1bab9252b7e98254bfee567513f703ad36344b00b94e39aa93e8dec47b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0504704c0a00015ef7c60945960e2592656d44647ceb5a62470316983206e667","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:02:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:02:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0504704c0a00015ef7c60945960e2592656d44647ceb5a62470316983206e667"}
{"level":"info","ts":"2026-07-15T17:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0504704c0a00015ef7c60945960e2592656d44647ceb5a62470316983206e667","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f444a1bab9252b7e98254bfee567513f703ad36344b00b94e39aa93e8dec47b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:02:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:02:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f444a1bab9252b7e98254bfee567513f703ad36344b00b94e39aa93e8dec47b"}
{"level":"info","ts":"2026-07-15T17:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f444a1bab9252b7e98254bfee567513f703ad36344b00b94e39aa93e8dec47b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0504704c0a00015ef7c60945960e2592656d44647ceb5a62470316983206e667","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f444a1bab9252b7e98254bfee567513f703ad36344b00b94e39aa93e8dec47b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:02:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:02:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7f444a1bab9252b7e98254bfee567513f703ad36344b00b94e39aa93e8dec47b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f444a1bab9252b7e98254bfee567513f703ad36344b00b94e39aa93e8dec47b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f444a1bab9252b7e98254bfee567513f703ad36344b00b94e39aa93e8dec47b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:02:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:02:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7f444a1bab9252b7e98254bfee567513f703ad36344b00b94e39aa93e8dec47b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0504704c0a00015ef7c60945960e2592656d44647ceb5a62470316983206e667"}
{"level":"error","ts":"2026-07-15T17:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7f444a1bab9252b7e98254bfee567513f703ad36344b00b94e39aa93e8dec47b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7f444a1bab9252b7e98254bfee567513f703ad36344b00b94e39aa93e8dec47b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T17:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0504704c0a00015ef7c60945960e2592656d44647ceb5a62470316983206e667","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:02:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:02:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0504704c0a00015ef7c60945960e2592656d44647ceb5a62470316983206e667"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0504704c0a00015ef7c60945960e2592656d44647ceb5a62470316983206e667","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f444a1bab9252b7e98254bfee567513f703ad36344b00b94e39aa93e8dec47b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:02:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:02:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f444a1bab9252b7e98254bfee567513f703ad36344b00b94e39aa93e8dec47b"}
{"level":"info","ts":"2026-07-15T17:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f444a1bab9252b7e98254bfee567513f703ad36344b00b94e39aa93e8dec47b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0504704c0a00015ef7c60945960e2592656d44647ceb5a62470316983206e667","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:02:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:02:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0504704c0a00015ef7c60945960e2592656d44647ceb5a62470316983206e667"}
{"level":"info","ts":"2026-07-15T17:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0504704c0a00015ef7c60945960e2592656d44647ceb5a62470316983206e667","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ccb46023fbedc9e387778d1b95533dcdbcac113b3027efbd7e71cd0915ab318","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:02:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:02:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ccb46023fbedc9e387778d1b95533dcdbcac113b3027efbd7e71cd0915ab318"}
{"level":"info","ts":"2026-07-15T17:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ccb46023fbedc9e387778d1b95533dcdbcac113b3027efbd7e71cd0915ab318","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f444a1bab9252b7e98254bfee567513f703ad36344b00b94e39aa93e8dec47b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0504704c0a00015ef7c60945960e2592656d44647ceb5a62470316983206e667","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:02:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:02:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0504704c0a00015ef7c60945960e2592656d44647ceb5a62470316983206e667"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0504704c0a00015ef7c60945960e2592656d44647ceb5a62470316983206e667","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ccb46023fbedc9e387778d1b95533dcdbcac113b3027efbd7e71cd0915ab318","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:02:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:02:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ccb46023fbedc9e387778d1b95533dcdbcac113b3027efbd7e71cd0915ab318"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f444a1bab9252b7e98254bfee567513f703ad36344b00b94e39aa93e8dec47b"}
{"level":"info","ts":"2026-07-15T17:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ccb46023fbedc9e387778d1b95533dcdbcac113b3027efbd7e71cd0915ab318","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0504704c0a00015ef7c60945960e2592656d44647ceb5a62470316983206e667","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:02:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:02:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0504704c0a00015ef7c60945960e2592656d44647ceb5a62470316983206e667"}
{"level":"info","ts":"2026-07-15T17:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0504704c0a00015ef7c60945960e2592656d44647ceb5a62470316983206e667","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f444a1bab9252b7e98254bfee567513f703ad36344b00b94e39aa93e8dec47b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:02:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:02:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7f444a1bab9252b7e98254bfee567513f703ad36344b00b94e39aa93e8dec47b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f444a1bab9252b7e98254bfee567513f703ad36344b00b94e39aa93e8dec47b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ccb46023fbedc9e387778d1b95533dcdbcac113b3027efbd7e71cd0915ab318","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:02:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:02:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ccb46023fbedc9e387778d1b95533dcdbcac113b3027efbd7e71cd0915ab318"}
{"level":"info","ts":"2026-07-15T17:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ccb46023fbedc9e387778d1b95533dcdbcac113b3027efbd7e71cd0915ab318","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0504704c0a00015ef7c60945960e2592656d44647ceb5a62470316983206e667","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f444a1bab9252b7e98254bfee567513f703ad36344b00b94e39aa93e8dec47b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2898c50cd376b9df8e24b00848cf704bb628ed136cdf64df315e8404643dbc91","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:02:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:02:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0504704c0a00015ef7c60945960e2592656d44647ceb5a62470316983206e667"}
{"level":"info","ts":"2026-07-15T17:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2898c50cd376b9df8e24b00848cf704bb628ed136cdf64df315e8404643dbc91","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ccb46023fbedc9e387778d1b95533dcdbcac113b3027efbd7e71cd0915ab318","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:02:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:02:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ccb46023fbedc9e387778d1b95533dcdbcac113b3027efbd7e71cd0915ab318"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ccb46023fbedc9e387778d1b95533dcdbcac113b3027efbd7e71cd0915ab318","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0504704c0a00015ef7c60945960e2592656d44647ceb5a62470316983206e667","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:02:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:02:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0504704c0a00015ef7c60945960e2592656d44647ceb5a62470316983206e667"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f444a1bab9252b7e98254bfee567513f703ad36344b00b94e39aa93e8dec47b"}
{"level":"info","ts":"2026-07-15T17:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0504704c0a00015ef7c60945960e2592656d44647ceb5a62470316983206e667","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2898c50cd376b9df8e24b00848cf704bb628ed136cdf64df315e8404643dbc91","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:02:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:02:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2898c50cd376b9df8e24b00848cf704bb628ed136cdf64df315e8404643dbc91"}
{"level":"info","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2898c50cd376b9df8e24b00848cf704bb628ed136cdf64df315e8404643dbc91","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ccb46023fbedc9e387778d1b95533dcdbcac113b3027efbd7e71cd0915ab318","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:02:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:02:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ccb46023fbedc9e387778d1b95533dcdbcac113b3027efbd7e71cd0915ab318","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0504704c0a00015ef7c60945960e2592656d44647ceb5a62470316983206e667","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2898c50cd376b9df8e24b00848cf704bb628ed136cdf64df315e8404643dbc91","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:02:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:02:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2898c50cd376b9df8e24b00848cf704bb628ed136cdf64df315e8404643dbc91"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ccb46023fbedc9e387778d1b95533dcdbcac113b3027efbd7e71cd0915ab318"}
{"level":"info","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2898c50cd376b9df8e24b00848cf704bb628ed136cdf64df315e8404643dbc91","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ccb46023fbedc9e387778d1b95533dcdbcac113b3027efbd7e71cd0915ab318","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:02:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:02:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ccb46023fbedc9e387778d1b95533dcdbcac113b3027efbd7e71cd0915ab318"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0504704c0a00015ef7c60945960e2592656d44647ceb5a62470316983206e667"}
{"level":"info","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ccb46023fbedc9e387778d1b95533dcdbcac113b3027efbd7e71cd0915ab318","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2898c50cd376b9df8e24b00848cf704bb628ed136cdf64df315e8404643dbc91","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:02:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:02:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2898c50cd376b9df8e24b00848cf704bb628ed136cdf64df315e8404643dbc91"}
{"level":"info","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2898c50cd376b9df8e24b00848cf704bb628ed136cdf64df315e8404643dbc91","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ccb46023fbedc9e387778d1b95533dcdbcac113b3027efbd7e71cd0915ab318","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:02:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:02:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ccb46023fbedc9e387778d1b95533dcdbcac113b3027efbd7e71cd0915ab318"}
{"level":"info","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ccb46023fbedc9e387778d1b95533dcdbcac113b3027efbd7e71cd0915ab318","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2898c50cd376b9df8e24b00848cf704bb628ed136cdf64df315e8404643dbc91","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ccb46023fbedc9e387778d1b95533dcdbcac113b3027efbd7e71cd0915ab318","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:02:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:02:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ccb46023fbedc9e387778d1b95533dcdbcac113b3027efbd7e71cd0915ab318"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ccb46023fbedc9e387778d1b95533dcdbcac113b3027efbd7e71cd0915ab318","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2898c50cd376b9df8e24b00848cf704bb628ed136cdf64df315e8404643dbc91","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ccb46023fbedc9e387778d1b95533dcdbcac113b3027efbd7e71cd0915ab318","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:02:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:02:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ccb46023fbedc9e387778d1b95533dcdbcac113b3027efbd7e71cd0915ab318"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2898c50cd376b9df8e24b00848cf704bb628ed136cdf64df315e8404643dbc91"}
{"level":"error","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2ccb46023fbedc9e387778d1b95533dcdbcac113b3027efbd7e71cd0915ab318","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2ccb46023fbedc9e387778d1b95533dcdbcac113b3027efbd7e71cd0915ab318\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ccb46023fbedc9e387778d1b95533dcdbcac113b3027efbd7e71cd0915ab318","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:02:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:02:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ccb46023fbedc9e387778d1b95533dcdbcac113b3027efbd7e71cd0915ab318"}
{"level":"info","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ccb46023fbedc9e387778d1b95533dcdbcac113b3027efbd7e71cd0915ab318","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2898c50cd376b9df8e24b00848cf704bb628ed136cdf64df315e8404643dbc91","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:02:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:02:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2898c50cd376b9df8e24b00848cf704bb628ed136cdf64df315e8404643dbc91"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2898c50cd376b9df8e24b00848cf704bb628ed136cdf64df315e8404643dbc91","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ccb46023fbedc9e387778d1b95533dcdbcac113b3027efbd7e71cd0915ab318","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2898c50cd376b9df8e24b00848cf704bb628ed136cdf64df315e8404643dbc91","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ccb46023fbedc9e387778d1b95533dcdbcac113b3027efbd7e71cd0915ab318"}
{"level":"debug","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ccb46023fbedc9e387778d1b95533dcdbcac113b3027efbd7e71cd0915ab318","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:02:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:02:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ccb46023fbedc9e387778d1b95533dcdbcac113b3027efbd7e71cd0915ab318"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ccb46023fbedc9e387778d1b95533dcdbcac113b3027efbd7e71cd0915ab318","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ccb46023fbedc9e387778d1b95533dcdbcac113b3027efbd7e71cd0915ab318","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2898c50cd376b9df8e24b00848cf704bb628ed136cdf64df315e8404643dbc91"}
{"level":"info","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ccb46023fbedc9e387778d1b95533dcdbcac113b3027efbd7e71cd0915ab318"}
{"level":"debug","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13ed1a1266c3ff148077a5b47236e34a1ef76fea9cbd52e5bc6702350c4fc78d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:02:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:02:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13ed1a1266c3ff148077a5b47236e34a1ef76fea9cbd52e5bc6702350c4fc78d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13ed1a1266c3ff148077a5b47236e34a1ef76fea9cbd52e5bc6702350c4fc78d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13ed1a1266c3ff148077a5b47236e34a1ef76fea9cbd52e5bc6702350c4fc78d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13ed1a1266c3ff148077a5b47236e34a1ef76fea9cbd52e5bc6702350c4fc78d"}
{"level":"debug","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13ed1a1266c3ff148077a5b47236e34a1ef76fea9cbd52e5bc6702350c4fc78d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13ed1a1266c3ff148077a5b47236e34a1ef76fea9cbd52e5bc6702350c4fc78d"}
{"level":"debug","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13ed1a1266c3ff148077a5b47236e34a1ef76fea9cbd52e5bc6702350c4fc78d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:02:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:02:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["13ed1a1266c3ff148077a5b47236e34a1ef76fea9cbd52e5bc6702350c4fc78d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13ed1a1266c3ff148077a5b47236e34a1ef76fea9cbd52e5bc6702350c4fc78d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13ed1a1266c3ff148077a5b47236e34a1ef76fea9cbd52e5bc6702350c4fc78d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:02:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:02:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13ed1a1266c3ff148077a5b47236e34a1ef76fea9cbd52e5bc6702350c4fc78d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0e155cec2cb64870ba5018098c7537b96e5c3933b78b14f59a8bbe349c428ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:02:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:02:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13ed1a1266c3ff148077a5b47236e34a1ef76fea9cbd52e5bc6702350c4fc78d"}
{"level":"info","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0e155cec2cb64870ba5018098c7537b96e5c3933b78b14f59a8bbe349c428ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13ed1a1266c3ff148077a5b47236e34a1ef76fea9cbd52e5bc6702350c4fc78d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:02:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:02:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["13ed1a1266c3ff148077a5b47236e34a1ef76fea9cbd52e5bc6702350c4fc78d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0e155cec2cb64870ba5018098c7537b96e5c3933b78b14f59a8bbe349c428ca"}
{"level":"info","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13ed1a1266c3ff148077a5b47236e34a1ef76fea9cbd52e5bc6702350c4fc78d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0e155cec2cb64870ba5018098c7537b96e5c3933b78b14f59a8bbe349c428ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:02:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:02:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a0e155cec2cb64870ba5018098c7537b96e5c3933b78b14f59a8bbe349c428ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0e155cec2cb64870ba5018098c7537b96e5c3933b78b14f59a8bbe349c428ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13ed1a1266c3ff148077a5b47236e34a1ef76fea9cbd52e5bc6702350c4fc78d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:02:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:02:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13ed1a1266c3ff148077a5b47236e34a1ef76fea9cbd52e5bc6702350c4fc78d"}
{"level":"info","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13ed1a1266c3ff148077a5b47236e34a1ef76fea9cbd52e5bc6702350c4fc78d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0e155cec2cb64870ba5018098c7537b96e5c3933b78b14f59a8bbe349c428ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:02:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:02:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0e155cec2cb64870ba5018098c7537b96e5c3933b78b14f59a8bbe349c428ca"}
{"level":"info","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0e155cec2cb64870ba5018098c7537b96e5c3933b78b14f59a8bbe349c428ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13ed1a1266c3ff148077a5b47236e34a1ef76fea9cbd52e5bc6702350c4fc78d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0e155cec2cb64870ba5018098c7537b96e5c3933b78b14f59a8bbe349c428ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:02:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:02:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a0e155cec2cb64870ba5018098c7537b96e5c3933b78b14f59a8bbe349c428ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0e155cec2cb64870ba5018098c7537b96e5c3933b78b14f59a8bbe349c428ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13ed1a1266c3ff148077a5b47236e34a1ef76fea9cbd52e5bc6702350c4fc78d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0e155cec2cb64870ba5018098c7537b96e5c3933b78b14f59a8bbe349c428ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:02:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:02:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a0e155cec2cb64870ba5018098c7537b96e5c3933b78b14f59a8bbe349c428ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13ed1a1266c3ff148077a5b47236e34a1ef76fea9cbd52e5bc6702350c4fc78d"}
{"level":"error","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a0e155cec2cb64870ba5018098c7537b96e5c3933b78b14f59a8bbe349c428ca","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a0e155cec2cb64870ba5018098c7537b96e5c3933b78b14f59a8bbe349c428ca\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0e155cec2cb64870ba5018098c7537b96e5c3933b78b14f59a8bbe349c428ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:02:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:02:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0e155cec2cb64870ba5018098c7537b96e5c3933b78b14f59a8bbe349c428ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0e155cec2cb64870ba5018098c7537b96e5c3933b78b14f59a8bbe349c428ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:02:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:02:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0e155cec2cb64870ba5018098c7537b96e5c3933b78b14f59a8bbe349c428ca"}
{"level":"error","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a0e155cec2cb64870ba5018098c7537b96e5c3933b78b14f59a8bbe349c428ca","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a0e155cec2cb64870ba5018098c7537b96e5c3933b78b14f59a8bbe349c428ca\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13ed1a1266c3ff148077a5b47236e34a1ef76fea9cbd52e5bc6702350c4fc78d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:02:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:02:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["13ed1a1266c3ff148077a5b47236e34a1ef76fea9cbd52e5bc6702350c4fc78d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13ed1a1266c3ff148077a5b47236e34a1ef76fea9cbd52e5bc6702350c4fc78d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0e155cec2cb64870ba5018098c7537b96e5c3933b78b14f59a8bbe349c428ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13ed1a1266c3ff148077a5b47236e34a1ef76fea9cbd52e5bc6702350c4fc78d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0e155cec2cb64870ba5018098c7537b96e5c3933b78b14f59a8bbe349c428ca"}
{"level":"info","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13ed1a1266c3ff148077a5b47236e34a1ef76fea9cbd52e5bc6702350c4fc78d"}
{"level":"debug","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0e155cec2cb64870ba5018098c7537b96e5c3933b78b14f59a8bbe349c428ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:02:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:02:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a0e155cec2cb64870ba5018098c7537b96e5c3933b78b14f59a8bbe349c428ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0e155cec2cb64870ba5018098c7537b96e5c3933b78b14f59a8bbe349c428ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0e155cec2cb64870ba5018098c7537b96e5c3933b78b14f59a8bbe349c428ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:02:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:02:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0e155cec2cb64870ba5018098c7537b96e5c3933b78b14f59a8bbe349c428ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0e155cec2cb64870ba5018098c7537b96e5c3933b78b14f59a8bbe349c428ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0e155cec2cb64870ba5018098c7537b96e5c3933b78b14f59a8bbe349c428ca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0e155cec2cb64870ba5018098c7537b96e5c3933b78b14f59a8bbe349c428ca"}
{"level":"debug","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0e155cec2cb64870ba5018098c7537b96e5c3933b78b14f59a8bbe349c428ca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0e155cec2cb64870ba5018098c7537b96e5c3933b78b14f59a8bbe349c428ca"}
{"level":"debug","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0e155cec2cb64870ba5018098c7537b96e5c3933b78b14f59a8bbe349c428ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:02:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:02:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a0e155cec2cb64870ba5018098c7537b96e5c3933b78b14f59a8bbe349c428ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0e155cec2cb64870ba5018098c7537b96e5c3933b78b14f59a8bbe349c428ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0e155cec2cb64870ba5018098c7537b96e5c3933b78b14f59a8bbe349c428ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:02:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:02:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0e155cec2cb64870ba5018098c7537b96e5c3933b78b14f59a8bbe349c428ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f673543d9371dc9ad467c880feaac3ec85882b58b66398b40c74561cdb63ec0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:02:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:02:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0e155cec2cb64870ba5018098c7537b96e5c3933b78b14f59a8bbe349c428ca"}
{"level":"info","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f673543d9371dc9ad467c880feaac3ec85882b58b66398b40c74561cdb63ec0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0e155cec2cb64870ba5018098c7537b96e5c3933b78b14f59a8bbe349c428ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:02:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:02:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a0e155cec2cb64870ba5018098c7537b96e5c3933b78b14f59a8bbe349c428ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f673543d9371dc9ad467c880feaac3ec85882b58b66398b40c74561cdb63ec0f"}
{"level":"info","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0e155cec2cb64870ba5018098c7537b96e5c3933b78b14f59a8bbe349c428ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f673543d9371dc9ad467c880feaac3ec85882b58b66398b40c74561cdb63ec0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:02:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:02:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f673543d9371dc9ad467c880feaac3ec85882b58b66398b40c74561cdb63ec0f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0e155cec2cb64870ba5018098c7537b96e5c3933b78b14f59a8bbe349c428ca"}
{"level":"info","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f673543d9371dc9ad467c880feaac3ec85882b58b66398b40c74561cdb63ec0f"}
{"level":"info","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0e155cec2cb64870ba5018098c7537b96e5c3933b78b14f59a8bbe349c428ca"}
{"level":"info","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f673543d9371dc9ad467c880feaac3ec85882b58b66398b40c74561cdb63ec0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0e155cec2cb64870ba5018098c7537b96e5c3933b78b14f59a8bbe349c428ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0c986a2e27310c5a13eeb9f7a9f4d494ac9ee2b86cfcf93d0facda2abd11048","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:02:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:02:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0c986a2e27310c5a13eeb9f7a9f4d494ac9ee2b86cfcf93d0facda2abd11048"}
{"level":"info","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f673543d9371dc9ad467c880feaac3ec85882b58b66398b40c74561cdb63ec0f"}
{"level":"info","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0c986a2e27310c5a13eeb9f7a9f4d494ac9ee2b86cfcf93d0facda2abd11048","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f673543d9371dc9ad467c880feaac3ec85882b58b66398b40c74561cdb63ec0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0c986a2e27310c5a13eeb9f7a9f4d494ac9ee2b86cfcf93d0facda2abd11048","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:02:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:02:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a0c986a2e27310c5a13eeb9f7a9f4d494ac9ee2b86cfcf93d0facda2abd11048"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0c986a2e27310c5a13eeb9f7a9f4d494ac9ee2b86cfcf93d0facda2abd11048"}
{"level":"info","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0c986a2e27310c5a13eeb9f7a9f4d494ac9ee2b86cfcf93d0facda2abd11048","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0c986a2e27310c5a13eeb9f7a9f4d494ac9ee2b86cfcf93d0facda2abd11048","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:02:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:02:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a0c986a2e27310c5a13eeb9f7a9f4d494ac9ee2b86cfcf93d0facda2abd11048"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0c986a2e27310c5a13eeb9f7a9f4d494ac9ee2b86cfcf93d0facda2abd11048"}
{"level":"error","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a0c986a2e27310c5a13eeb9f7a9f4d494ac9ee2b86cfcf93d0facda2abd11048","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a0c986a2e27310c5a13eeb9f7a9f4d494ac9ee2b86cfcf93d0facda2abd11048\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0c986a2e27310c5a13eeb9f7a9f4d494ac9ee2b86cfcf93d0facda2abd11048","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0c986a2e27310c5a13eeb9f7a9f4d494ac9ee2b86cfcf93d0facda2abd11048","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:03:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0c986a2e27310c5a13eeb9f7a9f4d494ac9ee2b86cfcf93d0facda2abd11048","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:03:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:03:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:03:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0c986a2e27310c5a13eeb9f7a9f4d494ac9ee2b86cfcf93d0facda2abd11048","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:03:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0c986a2e27310c5a13eeb9f7a9f4d494ac9ee2b86cfcf93d0facda2abd11048","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:03:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0c986a2e27310c5a13eeb9f7a9f4d494ac9ee2b86cfcf93d0facda2abd11048"}
{"level":"debug","ts":"2026-07-15T17:03:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0c986a2e27310c5a13eeb9f7a9f4d494ac9ee2b86cfcf93d0facda2abd11048","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:03:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0c986a2e27310c5a13eeb9f7a9f4d494ac9ee2b86cfcf93d0facda2abd11048"}
{"level":"debug","ts":"2026-07-15T17:03:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0c986a2e27310c5a13eeb9f7a9f4d494ac9ee2b86cfcf93d0facda2abd11048","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:03:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:03:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a0c986a2e27310c5a13eeb9f7a9f4d494ac9ee2b86cfcf93d0facda2abd11048"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0c986a2e27310c5a13eeb9f7a9f4d494ac9ee2b86cfcf93d0facda2abd11048","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0c986a2e27310c5a13eeb9f7a9f4d494ac9ee2b86cfcf93d0facda2abd11048","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:03:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:03:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0c986a2e27310c5a13eeb9f7a9f4d494ac9ee2b86cfcf93d0facda2abd11048","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0c986a2e27310c5a13eeb9f7a9f4d494ac9ee2b86cfcf93d0facda2abd11048","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0c986a2e27310c5a13eeb9f7a9f4d494ac9ee2b86cfcf93d0facda2abd11048"}
{"level":"debug","ts":"2026-07-15T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0c986a2e27310c5a13eeb9f7a9f4d494ac9ee2b86cfcf93d0facda2abd11048","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0c986a2e27310c5a13eeb9f7a9f4d494ac9ee2b86cfcf93d0facda2abd11048"}
{"level":"debug","ts":"2026-07-15T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d31e8d96f10ef2d59d7705a46ed064531ee77d02f1f8ca6e11825652ed46083e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0c986a2e27310c5a13eeb9f7a9f4d494ac9ee2b86cfcf93d0facda2abd11048","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:03:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:03:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a0c986a2e27310c5a13eeb9f7a9f4d494ac9ee2b86cfcf93d0facda2abd11048"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0c986a2e27310c5a13eeb9f7a9f4d494ac9ee2b86cfcf93d0facda2abd11048","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d31e8d96f10ef2d59d7705a46ed064531ee77d02f1f8ca6e11825652ed46083e"}
{"level":"debug","ts":"2026-07-15T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0c986a2e27310c5a13eeb9f7a9f4d494ac9ee2b86cfcf93d0facda2abd11048","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:03:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:03:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0c986a2e27310c5a13eeb9f7a9f4d494ac9ee2b86cfcf93d0facda2abd11048","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0c986a2e27310c5a13eeb9f7a9f4d494ac9ee2b86cfcf93d0facda2abd11048","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0c986a2e27310c5a13eeb9f7a9f4d494ac9ee2b86cfcf93d0facda2abd11048","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0c986a2e27310c5a13eeb9f7a9f4d494ac9ee2b86cfcf93d0facda2abd11048"}
{"level":"debug","ts":"2026-07-15T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0c986a2e27310c5a13eeb9f7a9f4d494ac9ee2b86cfcf93d0facda2abd11048","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0c986a2e27310c5a13eeb9f7a9f4d494ac9ee2b86cfcf93d0facda2abd11048"}
{"level":"debug","ts":"2026-07-15T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0c986a2e27310c5a13eeb9f7a9f4d494ac9ee2b86cfcf93d0facda2abd11048","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:03:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:03:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a0c986a2e27310c5a13eeb9f7a9f4d494ac9ee2b86cfcf93d0facda2abd11048"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0c986a2e27310c5a13eeb9f7a9f4d494ac9ee2b86cfcf93d0facda2abd11048","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0c986a2e27310c5a13eeb9f7a9f4d494ac9ee2b86cfcf93d0facda2abd11048","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0c986a2e27310c5a13eeb9f7a9f4d494ac9ee2b86cfcf93d0facda2abd11048"}
{"level":"debug","ts":"2026-07-15T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"876c145bd94ac961217089dc79d523eb4e7cb731890a15cc95867167efd5a3fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:03:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:03:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"876c145bd94ac961217089dc79d523eb4e7cb731890a15cc95867167efd5a3fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"876c145bd94ac961217089dc79d523eb4e7cb731890a15cc95867167efd5a3fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"091d01fc5bc6383a86d3f7d558c101e42d446b68ab6028635e10cb80a1788a0d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/876c145bd94ac961217089dc79d523eb4e7cb731890a15cc95867167efd5a3fc"}
{"level":"debug","ts":"2026-07-15T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"876c145bd94ac961217089dc79d523eb4e7cb731890a15cc95867167efd5a3fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:03:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:03:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["876c145bd94ac961217089dc79d523eb4e7cb731890a15cc95867167efd5a3fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"876c145bd94ac961217089dc79d523eb4e7cb731890a15cc95867167efd5a3fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"876c145bd94ac961217089dc79d523eb4e7cb731890a15cc95867167efd5a3fc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/091d01fc5bc6383a86d3f7d558c101e42d446b68ab6028635e10cb80a1788a0d"}
{"level":"info","ts":"2026-07-15T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/876c145bd94ac961217089dc79d523eb4e7cb731890a15cc95867167efd5a3fc"}
{"level":"debug","ts":"2026-07-15T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9006bcd64adf2438e9d026356dd007d07411c3b54a067d90bbada1f2285442d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:03:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:03:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9006bcd64adf2438e9d026356dd007d07411c3b54a067d90bbada1f2285442d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9006bcd64adf2438e9d026356dd007d07411c3b54a067d90bbada1f2285442d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9006bcd64adf2438e9d026356dd007d07411c3b54a067d90bbada1f2285442d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9006bcd64adf2438e9d026356dd007d07411c3b54a067d90bbada1f2285442d"}
{"level":"debug","ts":"2026-07-15T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9006bcd64adf2438e9d026356dd007d07411c3b54a067d90bbada1f2285442d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9006bcd64adf2438e9d026356dd007d07411c3b54a067d90bbada1f2285442d"}
{"level":"debug","ts":"2026-07-15T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9006bcd64adf2438e9d026356dd007d07411c3b54a067d90bbada1f2285442d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:03:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:03:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e9006bcd64adf2438e9d026356dd007d07411c3b54a067d90bbada1f2285442d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9006bcd64adf2438e9d026356dd007d07411c3b54a067d90bbada1f2285442d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a59bd9f5b78b051b344fb63bc986bb10fc4f19f795a3963c7026f70569489a0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:03:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:03:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a59bd9f5b78b051b344fb63bc986bb10fc4f19f795a3963c7026f70569489a0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9006bcd64adf2438e9d026356dd007d07411c3b54a067d90bbada1f2285442d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a59bd9f5b78b051b344fb63bc986bb10fc4f19f795a3963c7026f70569489a0f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a59bd9f5b78b051b344fb63bc986bb10fc4f19f795a3963c7026f70569489a0f"}
{"level":"debug","ts":"2026-07-15T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a59bd9f5b78b051b344fb63bc986bb10fc4f19f795a3963c7026f70569489a0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:03:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:03:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a59bd9f5b78b051b344fb63bc986bb10fc4f19f795a3963c7026f70569489a0f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a59bd9f5b78b051b344fb63bc986bb10fc4f19f795a3963c7026f70569489a0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a59bd9f5b78b051b344fb63bc986bb10fc4f19f795a3963c7026f70569489a0f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9006bcd64adf2438e9d026356dd007d07411c3b54a067d90bbada1f2285442d"}
{"level":"info","ts":"2026-07-15T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a59bd9f5b78b051b344fb63bc986bb10fc4f19f795a3963c7026f70569489a0f"}
{"level":"debug","ts":"2026-07-15T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4eec1144d9482d87a06bda5dbdd375f360e50d89b65f20cb727bfbc6593b9ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:03:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:03:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4eec1144d9482d87a06bda5dbdd375f360e50d89b65f20cb727bfbc6593b9ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4eec1144d9482d87a06bda5dbdd375f360e50d89b65f20cb727bfbc6593b9ca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4eec1144d9482d87a06bda5dbdd375f360e50d89b65f20cb727bfbc6593b9ca"}
{"level":"debug","ts":"2026-07-15T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4eec1144d9482d87a06bda5dbdd375f360e50d89b65f20cb727bfbc6593b9ca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4eec1144d9482d87a06bda5dbdd375f360e50d89b65f20cb727bfbc6593b9ca"}
{"level":"debug","ts":"2026-07-15T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4eec1144d9482d87a06bda5dbdd375f360e50d89b65f20cb727bfbc6593b9ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:03:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:03:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b4eec1144d9482d87a06bda5dbdd375f360e50d89b65f20cb727bfbc6593b9ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4eec1144d9482d87a06bda5dbdd375f360e50d89b65f20cb727bfbc6593b9ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4eec1144d9482d87a06bda5dbdd375f360e50d89b65f20cb727bfbc6593b9ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:03:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:03:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4eec1144d9482d87a06bda5dbdd375f360e50d89b65f20cb727bfbc6593b9ca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4eec1144d9482d87a06bda5dbdd375f360e50d89b65f20cb727bfbc6593b9ca"}
{"level":"debug","ts":"2026-07-15T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4eec1144d9482d87a06bda5dbdd375f360e50d89b65f20cb727bfbc6593b9ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4eec1144d9482d87a06bda5dbdd375f360e50d89b65f20cb727bfbc6593b9ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4eec1144d9482d87a06bda5dbdd375f360e50d89b65f20cb727bfbc6593b9ca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4eec1144d9482d87a06bda5dbdd375f360e50d89b65f20cb727bfbc6593b9ca"}
{"level":"debug","ts":"2026-07-15T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4eec1144d9482d87a06bda5dbdd375f360e50d89b65f20cb727bfbc6593b9ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:03:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:03:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b4eec1144d9482d87a06bda5dbdd375f360e50d89b65f20cb727bfbc6593b9ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4eec1144d9482d87a06bda5dbdd375f360e50d89b65f20cb727bfbc6593b9ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4eec1144d9482d87a06bda5dbdd375f360e50d89b65f20cb727bfbc6593b9ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:03:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:03:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4eec1144d9482d87a06bda5dbdd375f360e50d89b65f20cb727bfbc6593b9ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b620a81fb1078e87d0cb0e8abfd9d46f71a3a19dd0bfc99217dbd3e76f3bd13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4eec1144d9482d87a06bda5dbdd375f360e50d89b65f20cb727bfbc6593b9ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4eec1144d9482d87a06bda5dbdd375f360e50d89b65f20cb727bfbc6593b9ca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4eec1144d9482d87a06bda5dbdd375f360e50d89b65f20cb727bfbc6593b9ca"}
{"level":"debug","ts":"2026-07-15T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4eec1144d9482d87a06bda5dbdd375f360e50d89b65f20cb727bfbc6593b9ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:03:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:03:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b4eec1144d9482d87a06bda5dbdd375f360e50d89b65f20cb727bfbc6593b9ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b620a81fb1078e87d0cb0e8abfd9d46f71a3a19dd0bfc99217dbd3e76f3bd13"}
{"level":"info","ts":"2026-07-15T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4eec1144d9482d87a06bda5dbdd375f360e50d89b65f20cb727bfbc6593b9ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4eec1144d9482d87a06bda5dbdd375f360e50d89b65f20cb727bfbc6593b9ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:03:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:03:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4eec1144d9482d87a06bda5dbdd375f360e50d89b65f20cb727bfbc6593b9ca"}
{"level":"info","ts":"2026-07-15T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4eec1144d9482d87a06bda5dbdd375f360e50d89b65f20cb727bfbc6593b9ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4eec1144d9482d87a06bda5dbdd375f360e50d89b65f20cb727bfbc6593b9ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4eec1144d9482d87a06bda5dbdd375f360e50d89b65f20cb727bfbc6593b9ca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4eec1144d9482d87a06bda5dbdd375f360e50d89b65f20cb727bfbc6593b9ca"}
{"level":"debug","ts":"2026-07-15T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4eec1144d9482d87a06bda5dbdd375f360e50d89b65f20cb727bfbc6593b9ca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4eec1144d9482d87a06bda5dbdd375f360e50d89b65f20cb727bfbc6593b9ca"}
{"level":"debug","ts":"2026-07-15T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4eec1144d9482d87a06bda5dbdd375f360e50d89b65f20cb727bfbc6593b9ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:03:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:03:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b4eec1144d9482d87a06bda5dbdd375f360e50d89b65f20cb727bfbc6593b9ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4eec1144d9482d87a06bda5dbdd375f360e50d89b65f20cb727bfbc6593b9ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4eec1144d9482d87a06bda5dbdd375f360e50d89b65f20cb727bfbc6593b9ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:03:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:03:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4eec1144d9482d87a06bda5dbdd375f360e50d89b65f20cb727bfbc6593b9ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4eec1144d9482d87a06bda5dbdd375f360e50d89b65f20cb727bfbc6593b9ca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4eec1144d9482d87a06bda5dbdd375f360e50d89b65f20cb727bfbc6593b9ca"}
{"level":"debug","ts":"2026-07-15T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4eec1144d9482d87a06bda5dbdd375f360e50d89b65f20cb727bfbc6593b9ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08e991a3026b92613914c7bfe28710cd1e49447575dbbd1fb615dbd35a740d3d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4eec1144d9482d87a06bda5dbdd375f360e50d89b65f20cb727bfbc6593b9ca"}
{"level":"debug","ts":"2026-07-15T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4eec1144d9482d87a06bda5dbdd375f360e50d89b65f20cb727bfbc6593b9ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:03:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:03:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b4eec1144d9482d87a06bda5dbdd375f360e50d89b65f20cb727bfbc6593b9ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4eec1144d9482d87a06bda5dbdd375f360e50d89b65f20cb727bfbc6593b9ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4eec1144d9482d87a06bda5dbdd375f360e50d89b65f20cb727bfbc6593b9ca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08e991a3026b92613914c7bfe28710cd1e49447575dbbd1fb615dbd35a740d3d"}
{"level":"info","ts":"2026-07-15T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4eec1144d9482d87a06bda5dbdd375f360e50d89b65f20cb727bfbc6593b9ca"}
{"level":"debug","ts":"2026-07-15T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"872855411184ec9089cef59b060aac86e543405cadd122ed2669b56ca3f6c07b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:03:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:03:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"872855411184ec9089cef59b060aac86e543405cadd122ed2669b56ca3f6c07b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"872855411184ec9089cef59b060aac86e543405cadd122ed2669b56ca3f6c07b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"872855411184ec9089cef59b060aac86e543405cadd122ed2669b56ca3f6c07b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/872855411184ec9089cef59b060aac86e543405cadd122ed2669b56ca3f6c07b"}
{"level":"debug","ts":"2026-07-15T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"872855411184ec9089cef59b060aac86e543405cadd122ed2669b56ca3f6c07b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/872855411184ec9089cef59b060aac86e543405cadd122ed2669b56ca3f6c07b"}
{"level":"debug","ts":"2026-07-15T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"872855411184ec9089cef59b060aac86e543405cadd122ed2669b56ca3f6c07b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:03:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:03:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["872855411184ec9089cef59b060aac86e543405cadd122ed2669b56ca3f6c07b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"872855411184ec9089cef59b060aac86e543405cadd122ed2669b56ca3f6c07b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0e155cec2cb64870ba5018098c7537b96e5c3933b78b14f59a8bbe349c428ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:03:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:03:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0e155cec2cb64870ba5018098c7537b96e5c3933b78b14f59a8bbe349c428ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"872855411184ec9089cef59b060aac86e543405cadd122ed2669b56ca3f6c07b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0e155cec2cb64870ba5018098c7537b96e5c3933b78b14f59a8bbe349c428ca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0e155cec2cb64870ba5018098c7537b96e5c3933b78b14f59a8bbe349c428ca"}
{"level":"debug","ts":"2026-07-15T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0e155cec2cb64870ba5018098c7537b96e5c3933b78b14f59a8bbe349c428ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:03:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:03:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a0e155cec2cb64870ba5018098c7537b96e5c3933b78b14f59a8bbe349c428ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0e155cec2cb64870ba5018098c7537b96e5c3933b78b14f59a8bbe349c428ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0e155cec2cb64870ba5018098c7537b96e5c3933b78b14f59a8bbe349c428ca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/872855411184ec9089cef59b060aac86e543405cadd122ed2669b56ca3f6c07b"}
{"level":"info","ts":"2026-07-15T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0e155cec2cb64870ba5018098c7537b96e5c3933b78b14f59a8bbe349c428ca"}
{"level":"debug","ts":"2026-07-15T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"448ab29317cdf6a06bef2b199f6493f634200e3b9e364f7198fabb41b99880be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0504704c0a00015ef7c60945960e2592656d44647ceb5a62470316983206e667","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/448ab29317cdf6a06bef2b199f6493f634200e3b9e364f7198fabb41b99880be"}
{"level":"info","ts":"2026-07-15T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0504704c0a00015ef7c60945960e2592656d44647ceb5a62470316983206e667"}
{"level":"debug","ts":"2026-07-15T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9083306e26f176b594b7e92ec518c092fe2bf96c02cd810fb433d62b2c38c5c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:03:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:03:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9083306e26f176b594b7e92ec518c092fe2bf96c02cd810fb433d62b2c38c5c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9083306e26f176b594b7e92ec518c092fe2bf96c02cd810fb433d62b2c38c5c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9083306e26f176b594b7e92ec518c092fe2bf96c02cd810fb433d62b2c38c5c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"462a5176a363a2974c591fb8908094d965410f93ee48cad8ac0284978ef3e494","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9083306e26f176b594b7e92ec518c092fe2bf96c02cd810fb433d62b2c38c5c4"}
{"level":"debug","ts":"2026-07-15T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c307ad20dfd50d64e796cc96e335f562205f6f4ad85908710421a6ca5f67fd38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9083306e26f176b594b7e92ec518c092fe2bf96c02cd810fb433d62b2c38c5c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:03:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:03:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9083306e26f176b594b7e92ec518c092fe2bf96c02cd810fb433d62b2c38c5c4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/462a5176a363a2974c591fb8908094d965410f93ee48cad8ac0284978ef3e494"}
{"level":"info","ts":"2026-07-15T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9083306e26f176b594b7e92ec518c092fe2bf96c02cd810fb433d62b2c38c5c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13ed1a1266c3ff148077a5b47236e34a1ef76fea9cbd52e5bc6702350c4fc78d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9083306e26f176b594b7e92ec518c092fe2bf96c02cd810fb433d62b2c38c5c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:03:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:03:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9083306e26f176b594b7e92ec518c092fe2bf96c02cd810fb433d62b2c38c5c4"}
{"level":"info","ts":"2026-07-15T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9083306e26f176b594b7e92ec518c092fe2bf96c02cd810fb433d62b2c38c5c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9083306e26f176b594b7e92ec518c092fe2bf96c02cd810fb433d62b2c38c5c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:03:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:03:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9083306e26f176b594b7e92ec518c092fe2bf96c02cd810fb433d62b2c38c5c4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c307ad20dfd50d64e796cc96e335f562205f6f4ad85908710421a6ca5f67fd38"}
{"level":"info","ts":"2026-07-15T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9083306e26f176b594b7e92ec518c092fe2bf96c02cd810fb433d62b2c38c5c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9083306e26f176b594b7e92ec518c092fe2bf96c02cd810fb433d62b2c38c5c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:03:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:03:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9083306e26f176b594b7e92ec518c092fe2bf96c02cd810fb433d62b2c38c5c4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-15T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9083306e26f176b594b7e92ec518c092fe2bf96c02cd810fb433d62b2c38c5c4","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9083306e26f176b594b7e92ec518c092fe2bf96c02cd810fb433d62b2c38c5c4\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9083306e26f176b594b7e92ec518c092fe2bf96c02cd810fb433d62b2c38c5c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2898c50cd376b9df8e24b00848cf704bb628ed136cdf64df315e8404643dbc91","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9083306e26f176b594b7e92ec518c092fe2bf96c02cd810fb433d62b2c38c5c4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13ed1a1266c3ff148077a5b47236e34a1ef76fea9cbd52e5bc6702350c4fc78d"}
{"level":"debug","ts":"2026-07-15T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ccb46023fbedc9e387778d1b95533dcdbcac113b3027efbd7e71cd0915ab318","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9083306e26f176b594b7e92ec518c092fe2bf96c02cd810fb433d62b2c38c5c4"}
{"level":"debug","ts":"2026-07-15T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f444a1bab9252b7e98254bfee567513f703ad36344b00b94e39aa93e8dec47b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2898c50cd376b9df8e24b00848cf704bb628ed136cdf64df315e8404643dbc91"}
{"level":"debug","ts":"2026-07-15T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da9cf299a03d1055c5626b48f4aaedb58d0531113b2b8d59c1844b5839cf33f9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ccb46023fbedc9e387778d1b95533dcdbcac113b3027efbd7e71cd0915ab318"}
{"level":"debug","ts":"2026-07-15T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f673543d9371dc9ad467c880feaac3ec85882b58b66398b40c74561cdb63ec0f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f444a1bab9252b7e98254bfee567513f703ad36344b00b94e39aa93e8dec47b"}
{"level":"debug","ts":"2026-07-15T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4ea7c74c5b3f881037054272857f4a685987082fafca1640b2ddf7faad451d4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da9cf299a03d1055c5626b48f4aaedb58d0531113b2b8d59c1844b5839cf33f9"}
{"level":"debug","ts":"2026-07-15T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85c8fb50939cc50a25e9718017ea814a409a682f81408b5cc01558af14435034","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f673543d9371dc9ad467c880feaac3ec85882b58b66398b40c74561cdb63ec0f"}
{"level":"info","ts":"2026-07-15T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4ea7c74c5b3f881037054272857f4a685987082fafca1640b2ddf7faad451d4"}
{"level":"info","ts":"2026-07-15T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85c8fb50939cc50a25e9718017ea814a409a682f81408b5cc01558af14435034"}
{"level":"info","ts":"2026-07-15T17:03:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7020e133-04e9-4f94-8213-cf09fe18f44f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:57662","PortSpecifier":{"PortValue":57662}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7020e133-04e9-4f94-8213-cf09fe18f44f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8269b5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T17:03:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7020e133-04e9-4f94-8213-cf09fe18f44f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:57662","PortSpecifier":{"PortValue":57662}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784134989,"nanos":597923641},"http":{"id":"7020e133-04e9-4f94-8213-cf09fe18f44f","method":"POST","headers":{":authority":"e2e-shared-a-8269b5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:03:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7020e133-04e9-4f94-8213-cf09fe18f44f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T17:03:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7020e133-04e9-4f94-8213-cf09fe18f44f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2ffacb13-a3e0-46bc-98fe-52df4fec3861","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cb7ac727-7271-4758-b198-c4e61e072694"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2eae08074477"]}}
{"level":"debug","ts":"2026-07-15T17:03:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7020e133-04e9-4f94-8213-cf09fe18f44f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2eae08074477"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cb7ac727-7271-4758-b198-c4e61e072694"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2ffacb13-a3e0-46bc-98fe-52df4fec3861","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"091d01fc5bc6383a86d3f7d558c101e42d446b68ab6028635e10cb80a1788a0d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8269b5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:03:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7020e133-04e9-4f94-8213-cf09fe18f44f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:03:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7020e133-04e9-4f94-8213-cf09fe18f44f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:03:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7020e133-04e9-4f94-8213-cf09fe18f44f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8269b5/rate-test-model-8269b5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8269b5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:03:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7020e133-04e9-4f94-8213-cf09fe18f44f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T17:03:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7020e133-04e9-4f94-8213-cf09fe18f44f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T17:03:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7020e133-04e9-4f94-8213-cf09fe18f44f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T17:03:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7020e133-04e9-4f94-8213-cf09fe18f44f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T17:03:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7020e133-04e9-4f94-8213-cf09fe18f44f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T17:03:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"76f02984-f3d5-4c9d-a912-113e15c1c9bd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:50154","PortSpecifier":{"PortValue":50154}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"76f02984-f3d5-4c9d-a912-113e15c1c9bd","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-021cd5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T17:03:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"76f02984-f3d5-4c9d-a912-113e15c1c9bd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:50154","PortSpecifier":{"PortValue":50154}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784134989,"nanos":641012946},"http":{"id":"76f02984-f3d5-4c9d-a912-113e15c1c9bd","method":"POST","headers":{":authority":"e2e-shared-b-021cd5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:03:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"76f02984-f3d5-4c9d-a912-113e15c1c9bd","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T17:03:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"76f02984-f3d5-4c9d-a912-113e15c1c9bd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2ffacb13-a3e0-46bc-98fe-52df4fec3861","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cb7ac727-7271-4758-b198-c4e61e072694"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2eae08074477"]}}
{"level":"debug","ts":"2026-07-15T17:03:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"76f02984-f3d5-4c9d-a912-113e15c1c9bd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2eae08074477"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cb7ac727-7271-4758-b198-c4e61e072694"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2ffacb13-a3e0-46bc-98fe-52df4fec3861","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e9006bcd64adf2438e9d026356dd007d07411c3b54a067d90bbada1f2285442d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-021cd5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:03:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"76f02984-f3d5-4c9d-a912-113e15c1c9bd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:03:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"76f02984-f3d5-4c9d-a912-113e15c1c9bd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:03:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"76f02984-f3d5-4c9d-a912-113e15c1c9bd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-021cd5/rate-test-model-021cd5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-021cd5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:03:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"76f02984-f3d5-4c9d-a912-113e15c1c9bd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T17:03:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"76f02984-f3d5-4c9d-a912-113e15c1c9bd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T17:03:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"76f02984-f3d5-4c9d-a912-113e15c1c9bd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T17:03:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"76f02984-f3d5-4c9d-a912-113e15c1c9bd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T17:03:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"76f02984-f3d5-4c9d-a912-113e15c1c9bd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T17:03:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9e7ec5e6-8129-4529-9a18-e28425eeedd8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:57672","PortSpecifier":{"PortValue":57672}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9e7ec5e6-8129-4529-9a18-e28425eeedd8","method":"POST","path":"/ai-tenant-e2e-shared-a-8269b5/rate-test-model-8269b5/v1/completions","host":"e2e-shared-a-8269b5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T17:03:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9e7ec5e6-8129-4529-9a18-e28425eeedd8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:57672","PortSpecifier":{"PortValue":57672}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784134989,"nanos":682761699},"http":{"id":"9e7ec5e6-8129-4529-9a18-e28425eeedd8","method":"POST","headers":{":authority":"e2e-shared-a-8269b5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8269b5/rate-test-model-8269b5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:03:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9e7ec5e6-8129-4529-9a18-e28425eeedd8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-16bSMXg94P4xqRRnb_2Gh17fwSBuLEKUnOF22FpMqP6wSzh4aY0j4qEHGubRd"}
{"level":"debug","ts":"2026-07-15T17:03:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9e7ec5e6-8129-4529-9a18-e28425eeedd8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8269b5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-16bSMXg94P4xqRRnb_2Gh17fwSBuLEKUnOF22FpMqP6wSzh4aY0j4qEHGubRd\"}"}
{"level":"debug","ts":"2026-07-15T17:03:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9e7ec5e6-8129-4529-9a18-e28425eeedd8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8269b5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d7485643-ffae-49e2-a0f3-4356d8a9fb0d","keyName":"e2e-rate-a-7fa2b9","subscription":"e2e-rate-iso-a-7fa2b9","tenant":"e2e-shared-a-8269b5","userId":"d7485643-ffae-49e2-a0f3-4356d8a9fb0d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T17:03:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9e7ec5e6-8129-4529-9a18-e28425eeedd8","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8269b5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8269b5/rate-test-model-8269b5\",\"requestedSubscription\":\"e2e-rate-iso-a-7fa2b9\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T17:03:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9e7ec5e6-8129-4529-9a18-e28425eeedd8","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8269b5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8269b5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7fa2b9","namespace":"ai-tenant-e2e-shared-a-8269b5","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T17:03:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9e7ec5e6-8129-4529-9a18-e28425eeedd8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:03:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e7ec5e6-8129-4529-9a18-e28425eeedd8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:03:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e7ec5e6-8129-4529-9a18-e28425eeedd8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:03:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e7ec5e6-8129-4529-9a18-e28425eeedd8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8269b5/rate-test-model-8269b5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8269b5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:03:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e7ec5e6-8129-4529-9a18-e28425eeedd8","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:03:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9e7ec5e6-8129-4529-9a18-e28425eeedd8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T17:03:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9e7ec5e6-8129-4529-9a18-e28425eeedd8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T17:03:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9e7ec5e6-8129-4529-9a18-e28425eeedd8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7fa2b9"}
{"level":"debug","ts":"2026-07-15T17:03:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9e7ec5e6-8129-4529-9a18-e28425eeedd8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d7485643-ffae-49e2-a0f3-4356d8a9fb0d","keyName":"e2e-rate-a-7fa2b9","selected_subscription":"e2e-rate-iso-a-7fa2b9","selected_subscription_key":"ai-tenant-e2e-shared-a-8269b5/e2e-rate-iso-a-7fa2b9@ai-tenant-e2e-shared-a-8269b5/rate-test-model-8269b5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8269b5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7fa2b9","namespace":"ai-tenant-e2e-shared-a-8269b5","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T17:03:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9e7ec5e6-8129-4529-9a18-e28425eeedd8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T17:03:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9e7ec5e6-8129-4529-9a18-e28425eeedd8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T17:03:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a0159c6f-0b5a-4053-80db-b04bcba424f0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:57674","PortSpecifier":{"PortValue":57674}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a0159c6f-0b5a-4053-80db-b04bcba424f0","method":"POST","path":"/ai-tenant-e2e-shared-a-8269b5/rate-test-model-8269b5/v1/completions","host":"e2e-shared-a-8269b5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T17:03:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a0159c6f-0b5a-4053-80db-b04bcba424f0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:57674","PortSpecifier":{"PortValue":57674}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784134990,"nanos":744494195},"http":{"id":"a0159c6f-0b5a-4053-80db-b04bcba424f0","method":"POST","headers":{":authority":"e2e-shared-a-8269b5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8269b5/rate-test-model-8269b5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:03:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a0159c6f-0b5a-4053-80db-b04bcba424f0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-16bSMXg94P4xqRRnb_2Gh17fwSBuLEKUnOF22FpMqP6wSzh4aY0j4qEHGubRd"}
{"level":"debug","ts":"2026-07-15T17:03:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a0159c6f-0b5a-4053-80db-b04bcba424f0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8269b5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-16bSMXg94P4xqRRnb_2Gh17fwSBuLEKUnOF22FpMqP6wSzh4aY0j4qEHGubRd\"}"}
{"level":"debug","ts":"2026-07-15T17:03:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a0159c6f-0b5a-4053-80db-b04bcba424f0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8269b5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d7485643-ffae-49e2-a0f3-4356d8a9fb0d","keyName":"e2e-rate-a-7fa2b9","subscription":"e2e-rate-iso-a-7fa2b9","tenant":"e2e-shared-a-8269b5","userId":"d7485643-ffae-49e2-a0f3-4356d8a9fb0d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T17:03:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a0159c6f-0b5a-4053-80db-b04bcba424f0","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8269b5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8269b5/rate-test-model-8269b5\",\"requestedSubscription\":\"e2e-rate-iso-a-7fa2b9\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T17:03:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a0159c6f-0b5a-4053-80db-b04bcba424f0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8269b5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8269b5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7fa2b9","namespace":"ai-tenant-e2e-shared-a-8269b5","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T17:03:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a0159c6f-0b5a-4053-80db-b04bcba424f0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:03:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a0159c6f-0b5a-4053-80db-b04bcba424f0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:03:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a0159c6f-0b5a-4053-80db-b04bcba424f0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:03:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a0159c6f-0b5a-4053-80db-b04bcba424f0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8269b5/rate-test-model-8269b5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8269b5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:03:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a0159c6f-0b5a-4053-80db-b04bcba424f0","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:03:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a0159c6f-0b5a-4053-80db-b04bcba424f0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T17:03:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a0159c6f-0b5a-4053-80db-b04bcba424f0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T17:03:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a0159c6f-0b5a-4053-80db-b04bcba424f0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7fa2b9"}
{"level":"debug","ts":"2026-07-15T17:03:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a0159c6f-0b5a-4053-80db-b04bcba424f0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d7485643-ffae-49e2-a0f3-4356d8a9fb0d","keyName":"e2e-rate-a-7fa2b9","selected_subscription":"e2e-rate-iso-a-7fa2b9","selected_subscription_key":"ai-tenant-e2e-shared-a-8269b5/e2e-rate-iso-a-7fa2b9@ai-tenant-e2e-shared-a-8269b5/rate-test-model-8269b5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8269b5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7fa2b9","namespace":"ai-tenant-e2e-shared-a-8269b5","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T17:03:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a0159c6f-0b5a-4053-80db-b04bcba424f0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T17:03:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a0159c6f-0b5a-4053-80db-b04bcba424f0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T17:03:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9095c09e-8397-4e5c-ac66-3939d299dbd3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:45048","PortSpecifier":{"PortValue":45048}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9095c09e-8397-4e5c-ac66-3939d299dbd3","method":"POST","path":"/ai-tenant-e2e-shared-a-8269b5/rate-test-model-8269b5/v1/completions","host":"e2e-shared-a-8269b5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T17:03:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9095c09e-8397-4e5c-ac66-3939d299dbd3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:45048","PortSpecifier":{"PortValue":45048}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784134991,"nanos":785125853},"http":{"id":"9095c09e-8397-4e5c-ac66-3939d299dbd3","method":"POST","headers":{":authority":"e2e-shared-a-8269b5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8269b5/rate-test-model-8269b5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:03:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9095c09e-8397-4e5c-ac66-3939d299dbd3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-16bSMXg94P4xqRRnb_2Gh17fwSBuLEKUnOF22FpMqP6wSzh4aY0j4qEHGubRd"}
{"level":"debug","ts":"2026-07-15T17:03:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9095c09e-8397-4e5c-ac66-3939d299dbd3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8269b5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-16bSMXg94P4xqRRnb_2Gh17fwSBuLEKUnOF22FpMqP6wSzh4aY0j4qEHGubRd\"}"}
{"level":"debug","ts":"2026-07-15T17:03:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9095c09e-8397-4e5c-ac66-3939d299dbd3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8269b5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d7485643-ffae-49e2-a0f3-4356d8a9fb0d","keyName":"e2e-rate-a-7fa2b9","subscription":"e2e-rate-iso-a-7fa2b9","tenant":"e2e-shared-a-8269b5","userId":"d7485643-ffae-49e2-a0f3-4356d8a9fb0d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T17:03:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9095c09e-8397-4e5c-ac66-3939d299dbd3","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8269b5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8269b5/rate-test-model-8269b5\",\"requestedSubscription\":\"e2e-rate-iso-a-7fa2b9\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T17:03:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9095c09e-8397-4e5c-ac66-3939d299dbd3","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8269b5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8269b5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7fa2b9","namespace":"ai-tenant-e2e-shared-a-8269b5","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T17:03:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9095c09e-8397-4e5c-ac66-3939d299dbd3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:03:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9095c09e-8397-4e5c-ac66-3939d299dbd3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:03:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9095c09e-8397-4e5c-ac66-3939d299dbd3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:03:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9095c09e-8397-4e5c-ac66-3939d299dbd3","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:03:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9095c09e-8397-4e5c-ac66-3939d299dbd3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8269b5/rate-test-model-8269b5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8269b5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:03:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9095c09e-8397-4e5c-ac66-3939d299dbd3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T17:03:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9095c09e-8397-4e5c-ac66-3939d299dbd3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7fa2b9"}
{"level":"debug","ts":"2026-07-15T17:03:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9095c09e-8397-4e5c-ac66-3939d299dbd3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T17:03:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9095c09e-8397-4e5c-ac66-3939d299dbd3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d7485643-ffae-49e2-a0f3-4356d8a9fb0d","keyName":"e2e-rate-a-7fa2b9","selected_subscription":"e2e-rate-iso-a-7fa2b9","selected_subscription_key":"ai-tenant-e2e-shared-a-8269b5/e2e-rate-iso-a-7fa2b9@ai-tenant-e2e-shared-a-8269b5/rate-test-model-8269b5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8269b5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7fa2b9","namespace":"ai-tenant-e2e-shared-a-8269b5","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T17:03:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9095c09e-8397-4e5c-ac66-3939d299dbd3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T17:03:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9095c09e-8397-4e5c-ac66-3939d299dbd3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T17:03:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b792cdcc-612a-47b9-be41-32f1fbc44a78","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:45060","PortSpecifier":{"PortValue":45060}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b792cdcc-612a-47b9-be41-32f1fbc44a78","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8269b5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T17:03:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b792cdcc-612a-47b9-be41-32f1fbc44a78","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:45060","PortSpecifier":{"PortValue":45060}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784135000,"nanos":611427966},"http":{"id":"b792cdcc-612a-47b9-be41-32f1fbc44a78","method":"POST","headers":{":authority":"e2e-shared-a-8269b5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:03:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b792cdcc-612a-47b9-be41-32f1fbc44a78","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T17:03:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b792cdcc-612a-47b9-be41-32f1fbc44a78","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2ffacb13-a3e0-46bc-98fe-52df4fec3861","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cb7ac727-7271-4758-b198-c4e61e072694"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2eae08074477"]}}
{"level":"debug","ts":"2026-07-15T17:03:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b792cdcc-612a-47b9-be41-32f1fbc44a78","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2eae08074477"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cb7ac727-7271-4758-b198-c4e61e072694"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2ffacb13-a3e0-46bc-98fe-52df4fec3861","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"091d01fc5bc6383a86d3f7d558c101e42d446b68ab6028635e10cb80a1788a0d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8269b5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:03:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b792cdcc-612a-47b9-be41-32f1fbc44a78","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:03:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b792cdcc-612a-47b9-be41-32f1fbc44a78","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:03:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b792cdcc-612a-47b9-be41-32f1fbc44a78","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8269b5/rate-test-model-8269b5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8269b5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:03:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b792cdcc-612a-47b9-be41-32f1fbc44a78","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T17:03:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b792cdcc-612a-47b9-be41-32f1fbc44a78","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T17:03:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b792cdcc-612a-47b9-be41-32f1fbc44a78","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-15T17:03:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b792cdcc-612a-47b9-be41-32f1fbc44a78","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T17:03:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b792cdcc-612a-47b9-be41-32f1fbc44a78","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T17:03:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1591a2f0-558e-433f-b946-ac1b7925678e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:44866","PortSpecifier":{"PortValue":44866}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1591a2f0-558e-433f-b946-ac1b7925678e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-021cd5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T17:03:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1591a2f0-558e-433f-b946-ac1b7925678e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:44866","PortSpecifier":{"PortValue":44866}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784135000,"nanos":653631183},"http":{"id":"1591a2f0-558e-433f-b946-ac1b7925678e","method":"POST","headers":{":authority":"e2e-shared-b-021cd5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:03:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1591a2f0-558e-433f-b946-ac1b7925678e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T17:03:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1591a2f0-558e-433f-b946-ac1b7925678e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2ffacb13-a3e0-46bc-98fe-52df4fec3861","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cb7ac727-7271-4758-b198-c4e61e072694"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2eae08074477"]}}
{"level":"debug","ts":"2026-07-15T17:03:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1591a2f0-558e-433f-b946-ac1b7925678e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2eae08074477"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cb7ac727-7271-4758-b198-c4e61e072694"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2ffacb13-a3e0-46bc-98fe-52df4fec3861","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e9006bcd64adf2438e9d026356dd007d07411c3b54a067d90bbada1f2285442d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-021cd5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:03:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1591a2f0-558e-433f-b946-ac1b7925678e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:03:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1591a2f0-558e-433f-b946-ac1b7925678e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:03:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1591a2f0-558e-433f-b946-ac1b7925678e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-021cd5/rate-test-model-021cd5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-021cd5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:03:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1591a2f0-558e-433f-b946-ac1b7925678e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T17:03:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1591a2f0-558e-433f-b946-ac1b7925678e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T17:03:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1591a2f0-558e-433f-b946-ac1b7925678e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T17:03:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1591a2f0-558e-433f-b946-ac1b7925678e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T17:03:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1591a2f0-558e-433f-b946-ac1b7925678e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T17:03:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d648aee4-6a70-46d6-b502-01a3dbb62487","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:45064","PortSpecifier":{"PortValue":45064}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d648aee4-6a70-46d6-b502-01a3dbb62487","method":"POST","path":"/ai-tenant-e2e-shared-a-8269b5/rate-test-model-8269b5/v1/completions","host":"e2e-shared-a-8269b5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T17:03:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d648aee4-6a70-46d6-b502-01a3dbb62487","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:45064","PortSpecifier":{"PortValue":45064}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784135000,"nanos":691943630},"http":{"id":"d648aee4-6a70-46d6-b502-01a3dbb62487","method":"POST","headers":{":authority":"e2e-shared-a-8269b5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8269b5/rate-test-model-8269b5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:03:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d648aee4-6a70-46d6-b502-01a3dbb62487","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Kok6jQMFvyo8XFXE_qjZSgXh9BBF6as0S2PgME4s69wmumxj8OOYh1onfaLl"}
{"level":"debug","ts":"2026-07-15T17:03:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d648aee4-6a70-46d6-b502-01a3dbb62487","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8269b5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Kok6jQMFvyo8XFXE_qjZSgXh9BBF6as0S2PgME4s69wmumxj8OOYh1onfaLl\"}"}
{"level":"debug","ts":"2026-07-15T17:03:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d648aee4-6a70-46d6-b502-01a3dbb62487","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8269b5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"53a21038-93e3-453b-b948-3830b5a8ade4","keyName":"e2e-rate-a-61ff61","subscription":"e2e-rate-iso-a-61ff61","tenant":"e2e-shared-a-8269b5","userId":"53a21038-93e3-453b-b948-3830b5a8ade4","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T17:03:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d648aee4-6a70-46d6-b502-01a3dbb62487","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8269b5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8269b5/rate-test-model-8269b5\",\"requestedSubscription\":\"e2e-rate-iso-a-61ff61\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T17:03:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d648aee4-6a70-46d6-b502-01a3dbb62487","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8269b5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8269b5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-61ff61","namespace":"ai-tenant-e2e-shared-a-8269b5","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T17:03:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d648aee4-6a70-46d6-b502-01a3dbb62487","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:03:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d648aee4-6a70-46d6-b502-01a3dbb62487","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:03:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d648aee4-6a70-46d6-b502-01a3dbb62487","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:03:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d648aee4-6a70-46d6-b502-01a3dbb62487","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8269b5/rate-test-model-8269b5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8269b5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:03:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d648aee4-6a70-46d6-b502-01a3dbb62487","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:03:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d648aee4-6a70-46d6-b502-01a3dbb62487","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-61ff61"}
{"level":"debug","ts":"2026-07-15T17:03:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d648aee4-6a70-46d6-b502-01a3dbb62487","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T17:03:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d648aee4-6a70-46d6-b502-01a3dbb62487","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T17:03:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d648aee4-6a70-46d6-b502-01a3dbb62487","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"53a21038-93e3-453b-b948-3830b5a8ade4","keyName":"e2e-rate-a-61ff61","selected_subscription":"e2e-rate-iso-a-61ff61","selected_subscription_key":"ai-tenant-e2e-shared-a-8269b5/e2e-rate-iso-a-61ff61@ai-tenant-e2e-shared-a-8269b5/rate-test-model-8269b5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8269b5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-61ff61","namespace":"ai-tenant-e2e-shared-a-8269b5","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T17:03:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d648aee4-6a70-46d6-b502-01a3dbb62487","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T17:03:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d648aee4-6a70-46d6-b502-01a3dbb62487","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T17:03:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f4c8a86c-5048-4ad1-a2af-e22f22d5ac8d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:38960","PortSpecifier":{"PortValue":38960}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f4c8a86c-5048-4ad1-a2af-e22f22d5ac8d","method":"POST","path":"/ai-tenant-e2e-shared-a-8269b5/rate-test-model-8269b5/v1/completions","host":"e2e-shared-a-8269b5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T17:03:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f4c8a86c-5048-4ad1-a2af-e22f22d5ac8d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:38960","PortSpecifier":{"PortValue":38960}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784135001,"nanos":755321254},"http":{"id":"f4c8a86c-5048-4ad1-a2af-e22f22d5ac8d","method":"POST","headers":{":authority":"e2e-shared-a-8269b5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8269b5/rate-test-model-8269b5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:03:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f4c8a86c-5048-4ad1-a2af-e22f22d5ac8d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Kok6jQMFvyo8XFXE_qjZSgXh9BBF6as0S2PgME4s69wmumxj8OOYh1onfaLl"}
{"level":"debug","ts":"2026-07-15T17:03:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f4c8a86c-5048-4ad1-a2af-e22f22d5ac8d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8269b5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Kok6jQMFvyo8XFXE_qjZSgXh9BBF6as0S2PgME4s69wmumxj8OOYh1onfaLl\"}"}
{"level":"debug","ts":"2026-07-15T17:03:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f4c8a86c-5048-4ad1-a2af-e22f22d5ac8d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8269b5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"53a21038-93e3-453b-b948-3830b5a8ade4","keyName":"e2e-rate-a-61ff61","subscription":"e2e-rate-iso-a-61ff61","tenant":"e2e-shared-a-8269b5","userId":"53a21038-93e3-453b-b948-3830b5a8ade4","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T17:03:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f4c8a86c-5048-4ad1-a2af-e22f22d5ac8d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8269b5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8269b5/rate-test-model-8269b5\",\"requestedSubscription\":\"e2e-rate-iso-a-61ff61\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T17:03:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f4c8a86c-5048-4ad1-a2af-e22f22d5ac8d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8269b5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8269b5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-61ff61","namespace":"ai-tenant-e2e-shared-a-8269b5","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T17:03:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f4c8a86c-5048-4ad1-a2af-e22f22d5ac8d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:03:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4c8a86c-5048-4ad1-a2af-e22f22d5ac8d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:03:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4c8a86c-5048-4ad1-a2af-e22f22d5ac8d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:03:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4c8a86c-5048-4ad1-a2af-e22f22d5ac8d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:03:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4c8a86c-5048-4ad1-a2af-e22f22d5ac8d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8269b5/rate-test-model-8269b5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8269b5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:03:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f4c8a86c-5048-4ad1-a2af-e22f22d5ac8d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T17:03:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f4c8a86c-5048-4ad1-a2af-e22f22d5ac8d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-61ff61"}
{"level":"debug","ts":"2026-07-15T17:03:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f4c8a86c-5048-4ad1-a2af-e22f22d5ac8d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T17:03:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f4c8a86c-5048-4ad1-a2af-e22f22d5ac8d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"53a21038-93e3-453b-b948-3830b5a8ade4","keyName":"e2e-rate-a-61ff61","selected_subscription":"e2e-rate-iso-a-61ff61","selected_subscription_key":"ai-tenant-e2e-shared-a-8269b5/e2e-rate-iso-a-61ff61@ai-tenant-e2e-shared-a-8269b5/rate-test-model-8269b5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8269b5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-61ff61","namespace":"ai-tenant-e2e-shared-a-8269b5","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T17:03:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f4c8a86c-5048-4ad1-a2af-e22f22d5ac8d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T17:03:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f4c8a86c-5048-4ad1-a2af-e22f22d5ac8d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T17:03:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"53762fff-42b1-46d9-9578-b8ea578141ed","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:38962","PortSpecifier":{"PortValue":38962}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"53762fff-42b1-46d9-9578-b8ea578141ed","method":"POST","path":"/ai-tenant-e2e-shared-a-8269b5/rate-test-model-8269b5/v1/completions","host":"e2e-shared-a-8269b5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T17:03:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"53762fff-42b1-46d9-9578-b8ea578141ed","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:38962","PortSpecifier":{"PortValue":38962}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784135002,"nanos":798257266},"http":{"id":"53762fff-42b1-46d9-9578-b8ea578141ed","method":"POST","headers":{":authority":"e2e-shared-a-8269b5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8269b5/rate-test-model-8269b5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:03:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"53762fff-42b1-46d9-9578-b8ea578141ed","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Kok6jQMFvyo8XFXE_qjZSgXh9BBF6as0S2PgME4s69wmumxj8OOYh1onfaLl"}
{"level":"debug","ts":"2026-07-15T17:03:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"53762fff-42b1-46d9-9578-b8ea578141ed","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8269b5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Kok6jQMFvyo8XFXE_qjZSgXh9BBF6as0S2PgME4s69wmumxj8OOYh1onfaLl\"}"}
{"level":"debug","ts":"2026-07-15T17:03:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"53762fff-42b1-46d9-9578-b8ea578141ed","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8269b5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"53a21038-93e3-453b-b948-3830b5a8ade4","keyName":"e2e-rate-a-61ff61","subscription":"e2e-rate-iso-a-61ff61","tenant":"e2e-shared-a-8269b5","userId":"53a21038-93e3-453b-b948-3830b5a8ade4","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T17:03:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"53762fff-42b1-46d9-9578-b8ea578141ed","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8269b5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8269b5/rate-test-model-8269b5\",\"requestedSubscription\":\"e2e-rate-iso-a-61ff61\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T17:03:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"53762fff-42b1-46d9-9578-b8ea578141ed","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8269b5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8269b5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-61ff61","namespace":"ai-tenant-e2e-shared-a-8269b5","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T17:03:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"53762fff-42b1-46d9-9578-b8ea578141ed","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:03:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"53762fff-42b1-46d9-9578-b8ea578141ed","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:03:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"53762fff-42b1-46d9-9578-b8ea578141ed","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:03:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"53762fff-42b1-46d9-9578-b8ea578141ed","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:03:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"53762fff-42b1-46d9-9578-b8ea578141ed","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8269b5/rate-test-model-8269b5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8269b5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:03:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"53762fff-42b1-46d9-9578-b8ea578141ed","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T17:03:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"53762fff-42b1-46d9-9578-b8ea578141ed","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-61ff61"}
{"level":"debug","ts":"2026-07-15T17:03:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"53762fff-42b1-46d9-9578-b8ea578141ed","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T17:03:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"53762fff-42b1-46d9-9578-b8ea578141ed","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"53a21038-93e3-453b-b948-3830b5a8ade4","keyName":"e2e-rate-a-61ff61","selected_subscription":"e2e-rate-iso-a-61ff61","selected_subscription_key":"ai-tenant-e2e-shared-a-8269b5/e2e-rate-iso-a-61ff61@ai-tenant-e2e-shared-a-8269b5/rate-test-model-8269b5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8269b5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-61ff61","namespace":"ai-tenant-e2e-shared-a-8269b5","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T17:03:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"53762fff-42b1-46d9-9578-b8ea578141ed","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T17:03:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"53762fff-42b1-46d9-9578-b8ea578141ed","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T17:03:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"683b080f-db53-4814-adaf-3d68e7d7bd07","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:38972","PortSpecifier":{"PortValue":38972}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"683b080f-db53-4814-adaf-3d68e7d7bd07","method":"POST","path":"/ai-tenant-e2e-shared-a-8269b5/rate-test-model-8269b5/v1/completions","host":"e2e-shared-a-8269b5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T17:03:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"683b080f-db53-4814-adaf-3d68e7d7bd07","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:38972","PortSpecifier":{"PortValue":38972}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784135003,"nanos":848424183},"http":{"id":"683b080f-db53-4814-adaf-3d68e7d7bd07","method":"POST","headers":{":authority":"e2e-shared-a-8269b5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8269b5/rate-test-model-8269b5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:03:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"683b080f-db53-4814-adaf-3d68e7d7bd07","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Kok6jQMFvyo8XFXE_qjZSgXh9BBF6as0S2PgME4s69wmumxj8OOYh1onfaLl"}
{"level":"debug","ts":"2026-07-15T17:03:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"683b080f-db53-4814-adaf-3d68e7d7bd07","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8269b5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Kok6jQMFvyo8XFXE_qjZSgXh9BBF6as0S2PgME4s69wmumxj8OOYh1onfaLl\"}"}
{"level":"debug","ts":"2026-07-15T17:03:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"683b080f-db53-4814-adaf-3d68e7d7bd07","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8269b5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"53a21038-93e3-453b-b948-3830b5a8ade4","keyName":"e2e-rate-a-61ff61","subscription":"e2e-rate-iso-a-61ff61","tenant":"e2e-shared-a-8269b5","userId":"53a21038-93e3-453b-b948-3830b5a8ade4","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T17:03:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"683b080f-db53-4814-adaf-3d68e7d7bd07","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8269b5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8269b5/rate-test-model-8269b5\",\"requestedSubscription\":\"e2e-rate-iso-a-61ff61\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T17:03:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"683b080f-db53-4814-adaf-3d68e7d7bd07","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8269b5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8269b5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-61ff61","namespace":"ai-tenant-e2e-shared-a-8269b5","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T17:03:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"683b080f-db53-4814-adaf-3d68e7d7bd07","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:03:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"683b080f-db53-4814-adaf-3d68e7d7bd07","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:03:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"683b080f-db53-4814-adaf-3d68e7d7bd07","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:03:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"683b080f-db53-4814-adaf-3d68e7d7bd07","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8269b5/rate-test-model-8269b5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8269b5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:03:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"683b080f-db53-4814-adaf-3d68e7d7bd07","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:03:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"683b080f-db53-4814-adaf-3d68e7d7bd07","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T17:03:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"683b080f-db53-4814-adaf-3d68e7d7bd07","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-61ff61"}
{"level":"debug","ts":"2026-07-15T17:03:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"683b080f-db53-4814-adaf-3d68e7d7bd07","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T17:03:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"683b080f-db53-4814-adaf-3d68e7d7bd07","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"53a21038-93e3-453b-b948-3830b5a8ade4","keyName":"e2e-rate-a-61ff61","selected_subscription":"e2e-rate-iso-a-61ff61","selected_subscription_key":"ai-tenant-e2e-shared-a-8269b5/e2e-rate-iso-a-61ff61@ai-tenant-e2e-shared-a-8269b5/rate-test-model-8269b5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8269b5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-61ff61","namespace":"ai-tenant-e2e-shared-a-8269b5","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T17:03:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"683b080f-db53-4814-adaf-3d68e7d7bd07","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T17:03:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"683b080f-db53-4814-adaf-3d68e7d7bd07","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T17:03:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8af96c7e-5a9d-42c8-a9d1-9b881102b1ce","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:38978","PortSpecifier":{"PortValue":38978}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8af96c7e-5a9d-42c8-a9d1-9b881102b1ce","method":"POST","path":"/ai-tenant-e2e-shared-a-8269b5/rate-test-model-8269b5/v1/completions","host":"e2e-shared-a-8269b5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T17:03:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8af96c7e-5a9d-42c8-a9d1-9b881102b1ce","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:38978","PortSpecifier":{"PortValue":38978}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784135004,"nanos":885626947},"http":{"id":"8af96c7e-5a9d-42c8-a9d1-9b881102b1ce","method":"POST","headers":{":authority":"e2e-shared-a-8269b5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8269b5/rate-test-model-8269b5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:03:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8af96c7e-5a9d-42c8-a9d1-9b881102b1ce","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Kok6jQMFvyo8XFXE_qjZSgXh9BBF6as0S2PgME4s69wmumxj8OOYh1onfaLl"}
{"level":"debug","ts":"2026-07-15T17:03:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8af96c7e-5a9d-42c8-a9d1-9b881102b1ce","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8269b5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Kok6jQMFvyo8XFXE_qjZSgXh9BBF6as0S2PgME4s69wmumxj8OOYh1onfaLl\"}"}
{"level":"debug","ts":"2026-07-15T17:03:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8af96c7e-5a9d-42c8-a9d1-9b881102b1ce","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8269b5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"53a21038-93e3-453b-b948-3830b5a8ade4","keyName":"e2e-rate-a-61ff61","subscription":"e2e-rate-iso-a-61ff61","tenant":"e2e-shared-a-8269b5","userId":"53a21038-93e3-453b-b948-3830b5a8ade4","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T17:03:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8af96c7e-5a9d-42c8-a9d1-9b881102b1ce","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8269b5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8269b5/rate-test-model-8269b5\",\"requestedSubscription\":\"e2e-rate-iso-a-61ff61\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T17:03:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8af96c7e-5a9d-42c8-a9d1-9b881102b1ce","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8269b5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8269b5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-61ff61","namespace":"ai-tenant-e2e-shared-a-8269b5","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T17:03:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8af96c7e-5a9d-42c8-a9d1-9b881102b1ce","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:03:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8af96c7e-5a9d-42c8-a9d1-9b881102b1ce","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:03:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8af96c7e-5a9d-42c8-a9d1-9b881102b1ce","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:03:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8af96c7e-5a9d-42c8-a9d1-9b881102b1ce","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8269b5/rate-test-model-8269b5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8269b5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:03:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8af96c7e-5a9d-42c8-a9d1-9b881102b1ce","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:03:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8af96c7e-5a9d-42c8-a9d1-9b881102b1ce","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T17:03:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8af96c7e-5a9d-42c8-a9d1-9b881102b1ce","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T17:03:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8af96c7e-5a9d-42c8-a9d1-9b881102b1ce","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-61ff61"}
{"level":"debug","ts":"2026-07-15T17:03:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8af96c7e-5a9d-42c8-a9d1-9b881102b1ce","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"53a21038-93e3-453b-b948-3830b5a8ade4","keyName":"e2e-rate-a-61ff61","selected_subscription":"e2e-rate-iso-a-61ff61","selected_subscription_key":"ai-tenant-e2e-shared-a-8269b5/e2e-rate-iso-a-61ff61@ai-tenant-e2e-shared-a-8269b5/rate-test-model-8269b5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8269b5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-61ff61","namespace":"ai-tenant-e2e-shared-a-8269b5","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T17:03:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8af96c7e-5a9d-42c8-a9d1-9b881102b1ce","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T17:03:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8af96c7e-5a9d-42c8-a9d1-9b881102b1ce","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T17:03:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6ccaecf7-58ca-4506-9ed9-595c1cb37fc9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:38980","PortSpecifier":{"PortValue":38980}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6ccaecf7-58ca-4506-9ed9-595c1cb37fc9","method":"POST","path":"/ai-tenant-e2e-shared-a-8269b5/rate-test-model-8269b5/v1/completions","host":"e2e-shared-a-8269b5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T17:03:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6ccaecf7-58ca-4506-9ed9-595c1cb37fc9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:38980","PortSpecifier":{"PortValue":38980}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784135005,"nanos":924112459},"http":{"id":"6ccaecf7-58ca-4506-9ed9-595c1cb37fc9","method":"POST","headers":{":authority":"e2e-shared-a-8269b5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8269b5/rate-test-model-8269b5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:03:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6ccaecf7-58ca-4506-9ed9-595c1cb37fc9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Kok6jQMFvyo8XFXE_qjZSgXh9BBF6as0S2PgME4s69wmumxj8OOYh1onfaLl"}
{"level":"debug","ts":"2026-07-15T17:03:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6ccaecf7-58ca-4506-9ed9-595c1cb37fc9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8269b5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Kok6jQMFvyo8XFXE_qjZSgXh9BBF6as0S2PgME4s69wmumxj8OOYh1onfaLl\"}"}
{"level":"debug","ts":"2026-07-15T17:03:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6ccaecf7-58ca-4506-9ed9-595c1cb37fc9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8269b5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"53a21038-93e3-453b-b948-3830b5a8ade4","keyName":"e2e-rate-a-61ff61","subscription":"e2e-rate-iso-a-61ff61","tenant":"e2e-shared-a-8269b5","userId":"53a21038-93e3-453b-b948-3830b5a8ade4","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T17:03:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6ccaecf7-58ca-4506-9ed9-595c1cb37fc9","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8269b5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8269b5/rate-test-model-8269b5\",\"requestedSubscription\":\"e2e-rate-iso-a-61ff61\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T17:03:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6ccaecf7-58ca-4506-9ed9-595c1cb37fc9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8269b5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8269b5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-61ff61","namespace":"ai-tenant-e2e-shared-a-8269b5","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T17:03:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6ccaecf7-58ca-4506-9ed9-595c1cb37fc9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:03:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6ccaecf7-58ca-4506-9ed9-595c1cb37fc9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:03:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6ccaecf7-58ca-4506-9ed9-595c1cb37fc9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:03:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6ccaecf7-58ca-4506-9ed9-595c1cb37fc9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:03:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6ccaecf7-58ca-4506-9ed9-595c1cb37fc9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8269b5/rate-test-model-8269b5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8269b5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:03:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6ccaecf7-58ca-4506-9ed9-595c1cb37fc9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T17:03:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6ccaecf7-58ca-4506-9ed9-595c1cb37fc9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-61ff61"}
{"level":"debug","ts":"2026-07-15T17:03:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6ccaecf7-58ca-4506-9ed9-595c1cb37fc9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T17:03:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6ccaecf7-58ca-4506-9ed9-595c1cb37fc9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"53a21038-93e3-453b-b948-3830b5a8ade4","keyName":"e2e-rate-a-61ff61","selected_subscription":"e2e-rate-iso-a-61ff61","selected_subscription_key":"ai-tenant-e2e-shared-a-8269b5/e2e-rate-iso-a-61ff61@ai-tenant-e2e-shared-a-8269b5/rate-test-model-8269b5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8269b5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-61ff61","namespace":"ai-tenant-e2e-shared-a-8269b5","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T17:03:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6ccaecf7-58ca-4506-9ed9-595c1cb37fc9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T17:03:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6ccaecf7-58ca-4506-9ed9-595c1cb37fc9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T17:03:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4c148dcb-7d6a-4223-b395-71f21602511f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:38982","PortSpecifier":{"PortValue":38982}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4c148dcb-7d6a-4223-b395-71f21602511f","method":"POST","path":"/ai-tenant-e2e-shared-a-8269b5/rate-test-model-8269b5/v1/completions","host":"e2e-shared-a-8269b5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T17:03:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4c148dcb-7d6a-4223-b395-71f21602511f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:38982","PortSpecifier":{"PortValue":38982}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784135006,"nanos":968582367},"http":{"id":"4c148dcb-7d6a-4223-b395-71f21602511f","method":"POST","headers":{":authority":"e2e-shared-a-8269b5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8269b5/rate-test-model-8269b5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:03:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4c148dcb-7d6a-4223-b395-71f21602511f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Kok6jQMFvyo8XFXE_qjZSgXh9BBF6as0S2PgME4s69wmumxj8OOYh1onfaLl"}
{"level":"debug","ts":"2026-07-15T17:03:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4c148dcb-7d6a-4223-b395-71f21602511f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8269b5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Kok6jQMFvyo8XFXE_qjZSgXh9BBF6as0S2PgME4s69wmumxj8OOYh1onfaLl\"}"}
{"level":"debug","ts":"2026-07-15T17:03:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4c148dcb-7d6a-4223-b395-71f21602511f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8269b5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"53a21038-93e3-453b-b948-3830b5a8ade4","keyName":"e2e-rate-a-61ff61","subscription":"e2e-rate-iso-a-61ff61","tenant":"e2e-shared-a-8269b5","userId":"53a21038-93e3-453b-b948-3830b5a8ade4","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T17:03:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4c148dcb-7d6a-4223-b395-71f21602511f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8269b5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8269b5/rate-test-model-8269b5\",\"requestedSubscription\":\"e2e-rate-iso-a-61ff61\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T17:03:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4c148dcb-7d6a-4223-b395-71f21602511f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8269b5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8269b5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-61ff61","namespace":"ai-tenant-e2e-shared-a-8269b5","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T17:03:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4c148dcb-7d6a-4223-b395-71f21602511f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:03:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c148dcb-7d6a-4223-b395-71f21602511f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:03:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c148dcb-7d6a-4223-b395-71f21602511f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:03:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c148dcb-7d6a-4223-b395-71f21602511f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:03:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c148dcb-7d6a-4223-b395-71f21602511f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8269b5/rate-test-model-8269b5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8269b5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:03:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4c148dcb-7d6a-4223-b395-71f21602511f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T17:03:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4c148dcb-7d6a-4223-b395-71f21602511f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-61ff61"}
{"level":"debug","ts":"2026-07-15T17:03:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4c148dcb-7d6a-4223-b395-71f21602511f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T17:03:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4c148dcb-7d6a-4223-b395-71f21602511f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"53a21038-93e3-453b-b948-3830b5a8ade4","keyName":"e2e-rate-a-61ff61","selected_subscription":"e2e-rate-iso-a-61ff61","selected_subscription_key":"ai-tenant-e2e-shared-a-8269b5/e2e-rate-iso-a-61ff61@ai-tenant-e2e-shared-a-8269b5/rate-test-model-8269b5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8269b5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-61ff61","namespace":"ai-tenant-e2e-shared-a-8269b5","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T17:03:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4c148dcb-7d6a-4223-b395-71f21602511f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T17:03:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4c148dcb-7d6a-4223-b395-71f21602511f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T17:03:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2d5e3a34-221f-95d9-a336-9b92e35ce872","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:38994","PortSpecifier":{"PortValue":38994}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2d5e3a34-221f-95d9-a336-9b92e35ce872","method":"POST","path":"/ai-tenant-e2e-shared-a-8269b5/rate-test-model-8269b5/v1/completions","host":"e2e-shared-a-8269b5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T17:03:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2d5e3a34-221f-95d9-a336-9b92e35ce872","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:38994","PortSpecifier":{"PortValue":38994}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784135008,"nanos":10814489},"http":{"id":"2d5e3a34-221f-95d9-a336-9b92e35ce872","method":"POST","headers":{":authority":"e2e-shared-a-8269b5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8269b5/rate-test-model-8269b5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:03:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2d5e3a34-221f-95d9-a336-9b92e35ce872","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Kok6jQMFvyo8XFXE_qjZSgXh9BBF6as0S2PgME4s69wmumxj8OOYh1onfaLl"}
{"level":"debug","ts":"2026-07-15T17:03:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2d5e3a34-221f-95d9-a336-9b92e35ce872","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8269b5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Kok6jQMFvyo8XFXE_qjZSgXh9BBF6as0S2PgME4s69wmumxj8OOYh1onfaLl\"}"}
{"level":"debug","ts":"2026-07-15T17:03:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2d5e3a34-221f-95d9-a336-9b92e35ce872","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8269b5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"53a21038-93e3-453b-b948-3830b5a8ade4","keyName":"e2e-rate-a-61ff61","subscription":"e2e-rate-iso-a-61ff61","tenant":"e2e-shared-a-8269b5","userId":"53a21038-93e3-453b-b948-3830b5a8ade4","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T17:03:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2d5e3a34-221f-95d9-a336-9b92e35ce872","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8269b5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8269b5/rate-test-model-8269b5\",\"requestedSubscription\":\"e2e-rate-iso-a-61ff61\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T17:03:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2d5e3a34-221f-95d9-a336-9b92e35ce872","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8269b5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8269b5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-61ff61","namespace":"ai-tenant-e2e-shared-a-8269b5","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T17:03:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2d5e3a34-221f-95d9-a336-9b92e35ce872","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:03:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2d5e3a34-221f-95d9-a336-9b92e35ce872","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:03:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2d5e3a34-221f-95d9-a336-9b92e35ce872","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:03:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2d5e3a34-221f-95d9-a336-9b92e35ce872","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8269b5/rate-test-model-8269b5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8269b5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:03:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2d5e3a34-221f-95d9-a336-9b92e35ce872","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:03:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2d5e3a34-221f-95d9-a336-9b92e35ce872","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T17:03:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2d5e3a34-221f-95d9-a336-9b92e35ce872","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-61ff61"}
{"level":"debug","ts":"2026-07-15T17:03:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2d5e3a34-221f-95d9-a336-9b92e35ce872","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T17:03:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2d5e3a34-221f-95d9-a336-9b92e35ce872","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"53a21038-93e3-453b-b948-3830b5a8ade4","keyName":"e2e-rate-a-61ff61","selected_subscription":"e2e-rate-iso-a-61ff61","selected_subscription_key":"ai-tenant-e2e-shared-a-8269b5/e2e-rate-iso-a-61ff61@ai-tenant-e2e-shared-a-8269b5/rate-test-model-8269b5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8269b5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-61ff61","namespace":"ai-tenant-e2e-shared-a-8269b5","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T17:03:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2d5e3a34-221f-95d9-a336-9b92e35ce872","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T17:03:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2d5e3a34-221f-95d9-a336-9b92e35ce872","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T17:03:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b09cc8f1-e415-473c-bb4b-33d532349861","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:43200","PortSpecifier":{"PortValue":43200}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b09cc8f1-e415-473c-bb4b-33d532349861","method":"POST","path":"/ai-tenant-e2e-shared-b-021cd5/rate-test-model-021cd5/v1/completions","host":"e2e-shared-b-021cd5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T17:03:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b09cc8f1-e415-473c-bb4b-33d532349861","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:43200","PortSpecifier":{"PortValue":43200}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784135008,"nanos":51235715},"http":{"id":"b09cc8f1-e415-473c-bb4b-33d532349861","method":"POST","headers":{":authority":"e2e-shared-b-021cd5.apps.13a62ee0-dd7e-4834-8248-2eae08074477.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-021cd5/rate-test-model-021cd5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:03:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b09cc8f1-e415-473c-bb4b-33d532349861","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-lqaafuOjO1VvpfT2_l54QAaI6Zf2tr6GLjYdiwhJojkx75WoHTfSe8wWKqMz"}
{"level":"debug","ts":"2026-07-15T17:03:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b09cc8f1-e415-473c-bb4b-33d532349861","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-021cd5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-lqaafuOjO1VvpfT2_l54QAaI6Zf2tr6GLjYdiwhJojkx75WoHTfSe8wWKqMz\"}"}
{"level":"debug","ts":"2026-07-15T17:03:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b09cc8f1-e415-473c-bb4b-33d532349861","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-021cd5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e9094f33-1d32-47e7-9390-fdc987c04cca","keyName":"e2e-rate-b-61ff61","subscription":"e2e-rate-iso-b-61ff61","tenant":"e2e-shared-b-021cd5","userId":"e9094f33-1d32-47e7-9390-fdc987c04cca","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T17:03:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b09cc8f1-e415-473c-bb4b-33d532349861","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-021cd5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-021cd5/rate-test-model-021cd5\",\"requestedSubscription\":\"e2e-rate-iso-b-61ff61\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T17:03:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b09cc8f1-e415-473c-bb4b-33d532349861","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-021cd5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-021cd5","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-61ff61","namespace":"ai-tenant-e2e-shared-b-021cd5","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T17:03:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b09cc8f1-e415-473c-bb4b-33d532349861","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:03:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b09cc8f1-e415-473c-bb4b-33d532349861","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:03:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b09cc8f1-e415-473c-bb4b-33d532349861","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:03:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b09cc8f1-e415-473c-bb4b-33d532349861","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-021cd5/rate-test-model-021cd5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-021cd5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:03:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b09cc8f1-e415-473c-bb4b-33d532349861","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:03:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b09cc8f1-e415-473c-bb4b-33d532349861","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-61ff61"}
{"level":"debug","ts":"2026-07-15T17:03:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b09cc8f1-e415-473c-bb4b-33d532349861","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T17:03:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b09cc8f1-e415-473c-bb4b-33d532349861","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T17:03:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b09cc8f1-e415-473c-bb4b-33d532349861","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e9094f33-1d32-47e7-9390-fdc987c04cca","keyName":"e2e-rate-b-61ff61","selected_subscription":"e2e-rate-iso-b-61ff61","selected_subscription_key":"ai-tenant-e2e-shared-b-021cd5/e2e-rate-iso-b-61ff61@ai-tenant-e2e-shared-b-021cd5/rate-test-model-021cd5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-021cd5","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-61ff61","namespace":"ai-tenant-e2e-shared-b-021cd5","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T17:03:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b09cc8f1-e415-473c-bb4b-33d532349861","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T17:03:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b09cc8f1-e415-473c-bb4b-33d532349861","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T17:03:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0504704c0a00015ef7c60945960e2592656d44647ceb5a62470316983206e667"}
{"level":"info","ts":"2026-07-15T17:03:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2ccb46023fbedc9e387778d1b95533dcdbcac113b3027efbd7e71cd0915ab318"}
{"level":"info","ts":"2026-07-15T17:03:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2898c50cd376b9df8e24b00848cf704bb628ed136cdf64df315e8404643dbc91"}
{"level":"info","ts":"2026-07-15T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c307ad20dfd50d64e796cc96e335f562205f6f4ad85908710421a6ca5f67fd38"}
{"level":"info","ts":"2026-07-15T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a0c986a2e27310c5a13eeb9f7a9f4d494ac9ee2b86cfcf93d0facda2abd11048"}
{"level":"info","ts":"2026-07-15T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/462a5176a363a2974c591fb8908094d965410f93ee48cad8ac0284978ef3e494"}
{"level":"info","ts":"2026-07-15T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d31e8d96f10ef2d59d7705a46ed064531ee77d02f1f8ca6e11825652ed46083e"}
{"level":"info","ts":"2026-07-15T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/13ed1a1266c3ff148077a5b47236e34a1ef76fea9cbd52e5bc6702350c4fc78d"}
{"level":"info","ts":"2026-07-15T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a59bd9f5b78b051b344fb63bc986bb10fc4f19f795a3963c7026f70569489a0f"}
{"level":"info","ts":"2026-07-15T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f673543d9371dc9ad467c880feaac3ec85882b58b66398b40c74561cdb63ec0f"}
{"level":"info","ts":"2026-07-15T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c4ea7c74c5b3f881037054272857f4a685987082fafca1640b2ddf7faad451d4"}
{"level":"info","ts":"2026-07-15T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/876c145bd94ac961217089dc79d523eb4e7cb731890a15cc95867167efd5a3fc"}
{"level":"info","ts":"2026-07-15T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/08e991a3026b92613914c7bfe28710cd1e49447575dbbd1fb615dbd35a740d3d"}
{"level":"info","ts":"2026-07-15T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7f444a1bab9252b7e98254bfee567513f703ad36344b00b94e39aa93e8dec47b"}
{"level":"info","ts":"2026-07-15T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a0e155cec2cb64870ba5018098c7537b96e5c3933b78b14f59a8bbe349c428ca"}
{"level":"info","ts":"2026-07-15T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9083306e26f176b594b7e92ec518c092fe2bf96c02cd810fb433d62b2c38c5c4"}
{"level":"info","ts":"2026-07-15T17:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/091d01fc5bc6383a86d3f7d558c101e42d446b68ab6028635e10cb80a1788a0d"}
{"level":"info","ts":"2026-07-15T17:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/85c8fb50939cc50a25e9718017ea814a409a682f81408b5cc01558af14435034"}
{"level":"info","ts":"2026-07-15T17:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/da9cf299a03d1055c5626b48f4aaedb58d0531113b2b8d59c1844b5839cf33f9"}
{"level":"info","ts":"2026-07-15T17:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1b620a81fb1078e87d0cb0e8abfd9d46f71a3a19dd0bfc99217dbd3e76f3bd13"}
{"level":"info","ts":"2026-07-15T17:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/872855411184ec9089cef59b060aac86e543405cadd122ed2669b56ca3f6c07b"}
{"level":"info","ts":"2026-07-15T17:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b4eec1144d9482d87a06bda5dbdd375f360e50d89b65f20cb727bfbc6593b9ca"}
{"level":"info","ts":"2026-07-15T17:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/448ab29317cdf6a06bef2b199f6493f634200e3b9e364f7198fabb41b99880be"}
{"level":"info","ts":"2026-07-15T17:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e9006bcd64adf2438e9d026356dd007d07411c3b54a067d90bbada1f2285442d"}