{"level":"debug","ts":"2026-07-17T21:46:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"24ef3901-05bc-4164-9c3a-c4e07ca2797d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-d5e469.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1DCZS0yBrVa1edYjL_axdawvwuaH1bTnGK9rN1lDLOxTM7HwdTQgiQvn6Idu1\"}"}
{"level":"debug","ts":"2026-07-17T21:46:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"24ef3901-05bc-4164-9c3a-c4e07ca2797d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-d5e469.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"96251841-9edc-4a01-8d78-eeb85ca16ce0","keyName":"e2e-sub-iso-e722dc","subscription":"e2e-shared-sub-5908a7","tenant":"e2e-shared-b-d5e469","userId":"96251841-9edc-4a01-8d78-eeb85ca16ce0","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-17T21:46:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"24ef3901-05bc-4164-9c3a-c4e07ca2797d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T21:46:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"24ef3901-05bc-4164-9c3a-c4e07ca2797d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T21:46:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"24ef3901-05bc-4164-9c3a-c4e07ca2797d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T21:46:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"24ef3901-05bc-4164-9c3a-c4e07ca2797d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d5e469/sub-test-model-d5e469\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-d5e469/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T21:46:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"24ef3901-05bc-4164-9c3a-c4e07ca2797d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-17T21:46:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"24ef3901-05bc-4164-9c3a-c4e07ca2797d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-5908a7"}
{"level":"debug","ts":"2026-07-17T21:46:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"24ef3901-05bc-4164-9c3a-c4e07ca2797d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-17T21:46:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"24ef3901-05bc-4164-9c3a-c4e07ca2797d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-17T21:46:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"24ef3901-05bc-4164-9c3a-c4e07ca2797d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-17T21:46:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"24ef3901-05bc-4164-9c3a-c4e07ca2797d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-17T21:46:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8e3165ad7cb679a28f9345f734b543e0b7261316994db56d2fd21c8382900fa8"}
{"level":"info","ts":"2026-07-17T21:46:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/09550b453073b6c2ad4e0493243a19969c6590bb89a6b8b62269c9be95b0accd"}
{"level":"info","ts":"2026-07-17T21:46:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/88e5f65ad4ddfe8d3ed3c15ffa6f92f41505d3a5c0aef82d5c9884a804baa746"}
{"level":"info","ts":"2026-07-17T21:46:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/458029ecfba9db9bf1ca70bf954b4b6a92b178b1e83fa882c8a45c9a2a0bce21"}
{"level":"info","ts":"2026-07-17T21:46:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ceae0171777da519e60cf690cd0e52fb831a2df4a49182eee9e4a58330621022"}
{"level":"info","ts":"2026-07-17T21:46:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8597c0438e03bfbdcde7ecbdd6f2ab7eef82cba63f333eba20e30c11f61ec7ae"}
{"level":"info","ts":"2026-07-17T21:46:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/153bb5928d4fbf25691584e71c75326fb6aa0a46c02c24cbe2658f29a8ce9cf8"}
{"level":"info","ts":"2026-07-17T21:46:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b2afc8e499b2bf2041800474d2684e91bec35272cdc715c878d3e170b964fb96"}
{"level":"info","ts":"2026-07-17T21:46:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0fa08125d2721a1245a47d062ff74219023c4f1bbcda8c8f09079f33480b007f"}
{"level":"info","ts":"2026-07-17T21:46:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4aa9d51dfb1adbc9b64b77c9343ed24fa85bde6e5b36f1feee5e804299c2581e"}
{"level":"info","ts":"2026-07-17T21:46:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dd0f0c2740c04bc4cc3a046aefd1603eadc06d171de2cb8ed2e3a6a18d334e2c"}
{"level":"info","ts":"2026-07-17T21:46:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a27adc90490fafcac4848595e7e5c9532c6b1f84c1122aee2f639abec4165d63"}
{"level":"info","ts":"2026-07-17T21:46:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5f1fe9d7b85f744bf503bd03d83fa6c51849e72bca706593158ca53c9a29ab3f"}
{"level":"info","ts":"2026-07-17T21:46:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/99706c9f87da58a6b6aaef5f2ccf408779155bc2c1601c700ccafe865fa1fc00"}
{"level":"info","ts":"2026-07-17T21:46:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4bcdd9695bdcebbac2d68e4bd55fe8822c4e12a48e7e99b2de2b9ea6bd55e7f4"}
{"level":"info","ts":"2026-07-17T21:46:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/be8bd8d3c4432027dd0bc41190e59ac9011d582085a8f26fbcbf3223b251f89e"}
{"level":"info","ts":"2026-07-17T21:46:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6f80f0ee8c02c9cfe11ffec9ac4905a0f2fff12f6e4be384412884ce515878b2"}
{"level":"info","ts":"2026-07-17T21:46:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/36cd1239f477985a2fc1ccdb5c9534b9d73206b0aeb96946faa4624aaa6a7c9e"}
{"level":"info","ts":"2026-07-17T21:46:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4f0e3d739698e29688040f8eb7634449baa9ec61c82c8d8da9881bc339c09026"}
{"level":"info","ts":"2026-07-17T21:46:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c0f0e29cfe8f6415bf916284df30cf9d8f63413faf8fae46903d96bc626ef0a8"}
{"level":"info","ts":"2026-07-17T21:46:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4416955f39590a823d2baf9d84de566f8ed6e97cd4d589c8f64600798d4a6e4d"}
{"level":"info","ts":"2026-07-17T21:46:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0c4b2cfeaf657f9f10ac9adb68b84522420f2a4b6bb9dd41b319fa49f38805d2"}
{"level":"info","ts":"2026-07-17T21:46:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a528fcb5c8849cbbaa2a8facdc915d91bb007f6a3747c775e55e3780668323b9"}
{"level":"info","ts":"2026-07-17T21:46:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/47691dfb64116845fe5dcfedd5930954d480f234296cda6168a8b156d554a6fb"}
{"level":"debug","ts":"2026-07-17T21:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ceae0171777da519e60cf690cd0e52fb831a2df4a49182eee9e4a58330621022","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T21:46:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T21:46:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T21:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ceae0171777da519e60cf690cd0e52fb831a2df4a49182eee9e4a58330621022","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T21:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ceae0171777da519e60cf690cd0e52fb831a2df4a49182eee9e4a58330621022","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T21:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ceae0171777da519e60cf690cd0e52fb831a2df4a49182eee9e4a58330621022","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T21:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ceae0171777da519e60cf690cd0e52fb831a2df4a49182eee9e4a58330621022"}
{"level":"debug","ts":"2026-07-17T21:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ceae0171777da519e60cf690cd0e52fb831a2df4a49182eee9e4a58330621022","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T21:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ceae0171777da519e60cf690cd0e52fb831a2df4a49182eee9e4a58330621022"}
{"level":"debug","ts":"2026-07-17T21:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ceae0171777da519e60cf690cd0e52fb831a2df4a49182eee9e4a58330621022","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T21:46:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T21:46:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ceae0171777da519e60cf690cd0e52fb831a2df4a49182eee9e4a58330621022"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T21:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ceae0171777da519e60cf690cd0e52fb831a2df4a49182eee9e4a58330621022","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T21:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ceae0171777da519e60cf690cd0e52fb831a2df4a49182eee9e4a58330621022","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T21:46:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T21:46:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T21:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ceae0171777da519e60cf690cd0e52fb831a2df4a49182eee9e4a58330621022","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T21:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ceae0171777da519e60cf690cd0e52fb831a2df4a49182eee9e4a58330621022","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T21:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ceae0171777da519e60cf690cd0e52fb831a2df4a49182eee9e4a58330621022","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T21:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ceae0171777da519e60cf690cd0e52fb831a2df4a49182eee9e4a58330621022"}
{"level":"debug","ts":"2026-07-17T21:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ceae0171777da519e60cf690cd0e52fb831a2df4a49182eee9e4a58330621022","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T21:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ceae0171777da519e60cf690cd0e52fb831a2df4a49182eee9e4a58330621022"}
{"level":"debug","ts":"2026-07-17T21:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ceae0171777da519e60cf690cd0e52fb831a2df4a49182eee9e4a58330621022","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T21:46:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T21:46:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ceae0171777da519e60cf690cd0e52fb831a2df4a49182eee9e4a58330621022"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T21:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ceae0171777da519e60cf690cd0e52fb831a2df4a49182eee9e4a58330621022","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T21:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ceae0171777da519e60cf690cd0e52fb831a2df4a49182eee9e4a58330621022","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T21:46:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T21:46:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T21:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ceae0171777da519e60cf690cd0e52fb831a2df4a49182eee9e4a58330621022","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T21:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99706c9f87da58a6b6aaef5f2ccf408779155bc2c1601c700ccafe865fa1fc00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T21:46:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T21:46:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T21:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ceae0171777da519e60cf690cd0e52fb831a2df4a49182eee9e4a58330621022"}
{"level":"info","ts":"2026-07-17T21:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99706c9f87da58a6b6aaef5f2ccf408779155bc2c1601c700ccafe865fa1fc00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T21:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ceae0171777da519e60cf690cd0e52fb831a2df4a49182eee9e4a58330621022","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T21:46:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T21:46:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ceae0171777da519e60cf690cd0e52fb831a2df4a49182eee9e4a58330621022"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T21:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ceae0171777da519e60cf690cd0e52fb831a2df4a49182eee9e4a58330621022","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T21:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99706c9f87da58a6b6aaef5f2ccf408779155bc2c1601c700ccafe865fa1fc00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T21:46:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T21:46:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T21:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99706c9f87da58a6b6aaef5f2ccf408779155bc2c1601c700ccafe865fa1fc00"}
{"level":"info","ts":"2026-07-17T21:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99706c9f87da58a6b6aaef5f2ccf408779155bc2c1601c700ccafe865fa1fc00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T21:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ceae0171777da519e60cf690cd0e52fb831a2df4a49182eee9e4a58330621022","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T21:46:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T21:46:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T21:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ceae0171777da519e60cf690cd0e52fb831a2df4a49182eee9e4a58330621022"}
{"level":"info","ts":"2026-07-17T21:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ceae0171777da519e60cf690cd0e52fb831a2df4a49182eee9e4a58330621022","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T21:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99706c9f87da58a6b6aaef5f2ccf408779155bc2c1601c700ccafe865fa1fc00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T21:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ceae0171777da519e60cf690cd0e52fb831a2df4a49182eee9e4a58330621022","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T21:46:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T21:46:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ceae0171777da519e60cf690cd0e52fb831a2df4a49182eee9e4a58330621022"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ceae0171777da519e60cf690cd0e52fb831a2df4a49182eee9e4a58330621022","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ceae0171777da519e60cf690cd0e52fb831a2df4a49182eee9e4a58330621022","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T21:46:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T21:46:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ceae0171777da519e60cf690cd0e52fb831a2df4a49182eee9e4a58330621022"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99706c9f87da58a6b6aaef5f2ccf408779155bc2c1601c700ccafe865fa1fc00"}
{"level":"error","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ceae0171777da519e60cf690cd0e52fb831a2df4a49182eee9e4a58330621022","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ceae0171777da519e60cf690cd0e52fb831a2df4a49182eee9e4a58330621022\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99706c9f87da58a6b6aaef5f2ccf408779155bc2c1601c700ccafe865fa1fc00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T21:46:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T21:46:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99706c9f87da58a6b6aaef5f2ccf408779155bc2c1601c700ccafe865fa1fc00"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99706c9f87da58a6b6aaef5f2ccf408779155bc2c1601c700ccafe865fa1fc00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ceae0171777da519e60cf690cd0e52fb831a2df4a49182eee9e4a58330621022","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T21:46:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T21:46:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ceae0171777da519e60cf690cd0e52fb831a2df4a49182eee9e4a58330621022"}
{"level":"info","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ceae0171777da519e60cf690cd0e52fb831a2df4a49182eee9e4a58330621022","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99706c9f87da58a6b6aaef5f2ccf408779155bc2c1601c700ccafe865fa1fc00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T21:46:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T21:46:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99706c9f87da58a6b6aaef5f2ccf408779155bc2c1601c700ccafe865fa1fc00"}
{"level":"info","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99706c9f87da58a6b6aaef5f2ccf408779155bc2c1601c700ccafe865fa1fc00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ceae0171777da519e60cf690cd0e52fb831a2df4a49182eee9e4a58330621022","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99706c9f87da58a6b6aaef5f2ccf408779155bc2c1601c700ccafe865fa1fc00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T21:46:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T21:46:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99706c9f87da58a6b6aaef5f2ccf408779155bc2c1601c700ccafe865fa1fc00"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ceae0171777da519e60cf690cd0e52fb831a2df4a49182eee9e4a58330621022"}
{"level":"info","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99706c9f87da58a6b6aaef5f2ccf408779155bc2c1601c700ccafe865fa1fc00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99706c9f87da58a6b6aaef5f2ccf408779155bc2c1601c700ccafe865fa1fc00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99706c9f87da58a6b6aaef5f2ccf408779155bc2c1601c700ccafe865fa1fc00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T21:46:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T21:46:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99706c9f87da58a6b6aaef5f2ccf408779155bc2c1601c700ccafe865fa1fc00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ceae0171777da519e60cf690cd0e52fb831a2df4a49182eee9e4a58330621022","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T21:46:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T21:46:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ceae0171777da519e60cf690cd0e52fb831a2df4a49182eee9e4a58330621022"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99706c9f87da58a6b6aaef5f2ccf408779155bc2c1601c700ccafe865fa1fc00"}
{"level":"info","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ceae0171777da519e60cf690cd0e52fb831a2df4a49182eee9e4a58330621022","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99706c9f87da58a6b6aaef5f2ccf408779155bc2c1601c700ccafe865fa1fc00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ceae0171777da519e60cf690cd0e52fb831a2df4a49182eee9e4a58330621022","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99706c9f87da58a6b6aaef5f2ccf408779155bc2c1601c700ccafe865fa1fc00"}
{"level":"debug","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99706c9f87da58a6b6aaef5f2ccf408779155bc2c1601c700ccafe865fa1fc00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T21:46:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T21:46:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99706c9f87da58a6b6aaef5f2ccf408779155bc2c1601c700ccafe865fa1fc00"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ceae0171777da519e60cf690cd0e52fb831a2df4a49182eee9e4a58330621022"}
{"level":"info","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99706c9f87da58a6b6aaef5f2ccf408779155bc2c1601c700ccafe865fa1fc00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd8dcc0d61af372e76ddf720f638e5c1c50569593dade1eabe77c8e8074fc03f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T21:46:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T21:46:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd8dcc0d61af372e76ddf720f638e5c1c50569593dade1eabe77c8e8074fc03f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99706c9f87da58a6b6aaef5f2ccf408779155bc2c1601c700ccafe865fa1fc00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd8dcc0d61af372e76ddf720f638e5c1c50569593dade1eabe77c8e8074fc03f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd8dcc0d61af372e76ddf720f638e5c1c50569593dade1eabe77c8e8074fc03f"}
{"level":"debug","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd8dcc0d61af372e76ddf720f638e5c1c50569593dade1eabe77c8e8074fc03f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T21:46:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T21:46:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd8dcc0d61af372e76ddf720f638e5c1c50569593dade1eabe77c8e8074fc03f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd8dcc0d61af372e76ddf720f638e5c1c50569593dade1eabe77c8e8074fc03f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd8dcc0d61af372e76ddf720f638e5c1c50569593dade1eabe77c8e8074fc03f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99706c9f87da58a6b6aaef5f2ccf408779155bc2c1601c700ccafe865fa1fc00"}
{"level":"info","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd8dcc0d61af372e76ddf720f638e5c1c50569593dade1eabe77c8e8074fc03f"}
{"level":"debug","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5656d90b453370eacf3adb7afcff2d448b8c6f30fbf7b9c1b6bf49f0010a51b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T21:46:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T21:46:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5656d90b453370eacf3adb7afcff2d448b8c6f30fbf7b9c1b6bf49f0010a51b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5656d90b453370eacf3adb7afcff2d448b8c6f30fbf7b9c1b6bf49f0010a51b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T21:46:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T21:46:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5656d90b453370eacf3adb7afcff2d448b8c6f30fbf7b9c1b6bf49f0010a51b1"}
{"level":"info","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5656d90b453370eacf3adb7afcff2d448b8c6f30fbf7b9c1b6bf49f0010a51b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5656d90b453370eacf3adb7afcff2d448b8c6f30fbf7b9c1b6bf49f0010a51b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T21:46:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T21:46:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5656d90b453370eacf3adb7afcff2d448b8c6f30fbf7b9c1b6bf49f0010a51b1","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5656d90b453370eacf3adb7afcff2d448b8c6f30fbf7b9c1b6bf49f0010a51b1\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5656d90b453370eacf3adb7afcff2d448b8c6f30fbf7b9c1b6bf49f0010a51b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5656d90b453370eacf3adb7afcff2d448b8c6f30fbf7b9c1b6bf49f0010a51b1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5656d90b453370eacf3adb7afcff2d448b8c6f30fbf7b9c1b6bf49f0010a51b1"}
{"level":"info","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5656d90b453370eacf3adb7afcff2d448b8c6f30fbf7b9c1b6bf49f0010a51b1"}
{"level":"debug","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7003c461bdc8d8abf2f59468d6b8a4e7730ee411390ea6cb777ccd57c1d297b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T21:46:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T21:46:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7003c461bdc8d8abf2f59468d6b8a4e7730ee411390ea6cb777ccd57c1d297b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52578a6cac0101a3e66521d797403e84cfa423c724379229503db10f53cb31cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T21:46:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T21:46:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7003c461bdc8d8abf2f59468d6b8a4e7730ee411390ea6cb777ccd57c1d297b"}
{"level":"info","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52578a6cac0101a3e66521d797403e84cfa423c724379229503db10f53cb31cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7003c461bdc8d8abf2f59468d6b8a4e7730ee411390ea6cb777ccd57c1d297b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T21:46:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T21:46:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7003c461bdc8d8abf2f59468d6b8a4e7730ee411390ea6cb777ccd57c1d297b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52578a6cac0101a3e66521d797403e84cfa423c724379229503db10f53cb31cd"}
{"level":"info","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7003c461bdc8d8abf2f59468d6b8a4e7730ee411390ea6cb777ccd57c1d297b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5656d90b453370eacf3adb7afcff2d448b8c6f30fbf7b9c1b6bf49f0010a51b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T21:46:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T21:46:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5656d90b453370eacf3adb7afcff2d448b8c6f30fbf7b9c1b6bf49f0010a51b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5656d90b453370eacf3adb7afcff2d448b8c6f30fbf7b9c1b6bf49f0010a51b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52578a6cac0101a3e66521d797403e84cfa423c724379229503db10f53cb31cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T21:46:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T21:46:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52578a6cac0101a3e66521d797403e84cfa423c724379229503db10f53cb31cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7003c461bdc8d8abf2f59468d6b8a4e7730ee411390ea6cb777ccd57c1d297b"}
{"level":"info","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52578a6cac0101a3e66521d797403e84cfa423c724379229503db10f53cb31cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7003c461bdc8d8abf2f59468d6b8a4e7730ee411390ea6cb777ccd57c1d297b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5656d90b453370eacf3adb7afcff2d448b8c6f30fbf7b9c1b6bf49f0010a51b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52578a6cac0101a3e66521d797403e84cfa423c724379229503db10f53cb31cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T21:46:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T21:46:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52578a6cac0101a3e66521d797403e84cfa423c724379229503db10f53cb31cd"}
{"level":"info","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52578a6cac0101a3e66521d797403e84cfa423c724379229503db10f53cb31cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52578a6cac0101a3e66521d797403e84cfa423c724379229503db10f53cb31cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T21:46:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T21:46:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52578a6cac0101a3e66521d797403e84cfa423c724379229503db10f53cb31cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52578a6cac0101a3e66521d797403e84cfa423c724379229503db10f53cb31cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52578a6cac0101a3e66521d797403e84cfa423c724379229503db10f53cb31cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T21:46:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T21:46:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52578a6cac0101a3e66521d797403e84cfa423c724379229503db10f53cb31cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5656d90b453370eacf3adb7afcff2d448b8c6f30fbf7b9c1b6bf49f0010a51b1"}
{"level":"error","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"52578a6cac0101a3e66521d797403e84cfa423c724379229503db10f53cb31cd","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"52578a6cac0101a3e66521d797403e84cfa423c724379229503db10f53cb31cd\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52578a6cac0101a3e66521d797403e84cfa423c724379229503db10f53cb31cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4b7dad3d7b2319f041669f8dc7bc16a5a61bb4d65a9447f415be98d2baf2a25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T21:46:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T21:46:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4b7dad3d7b2319f041669f8dc7bc16a5a61bb4d65a9447f415be98d2baf2a25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52578a6cac0101a3e66521d797403e84cfa423c724379229503db10f53cb31cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4b7dad3d7b2319f041669f8dc7bc16a5a61bb4d65a9447f415be98d2baf2a25","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7003c461bdc8d8abf2f59468d6b8a4e7730ee411390ea6cb777ccd57c1d297b"}
{"level":"debug","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4b7dad3d7b2319f041669f8dc7bc16a5a61bb4d65a9447f415be98d2baf2a25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4b7dad3d7b2319f041669f8dc7bc16a5a61bb4d65a9447f415be98d2baf2a25","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52578a6cac0101a3e66521d797403e84cfa423c724379229503db10f53cb31cd"}
{"level":"info","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4b7dad3d7b2319f041669f8dc7bc16a5a61bb4d65a9447f415be98d2baf2a25"}
{"level":"debug","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4b7dad3d7b2319f041669f8dc7bc16a5a61bb4d65a9447f415be98d2baf2a25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T21:46:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T21:46:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b4b7dad3d7b2319f041669f8dc7bc16a5a61bb4d65a9447f415be98d2baf2a25"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4b7dad3d7b2319f041669f8dc7bc16a5a61bb4d65a9447f415be98d2baf2a25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4b7dad3d7b2319f041669f8dc7bc16a5a61bb4d65a9447f415be98d2baf2a25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T21:46:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T21:46:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4b7dad3d7b2319f041669f8dc7bc16a5a61bb4d65a9447f415be98d2baf2a25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f80f0ee8c02c9cfe11ffec9ac4905a0f2fff12f6e4be384412884ce515878b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T21:46:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T21:46:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f80f0ee8c02c9cfe11ffec9ac4905a0f2fff12f6e4be384412884ce515878b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4b7dad3d7b2319f041669f8dc7bc16a5a61bb4d65a9447f415be98d2baf2a25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f80f0ee8c02c9cfe11ffec9ac4905a0f2fff12f6e4be384412884ce515878b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4b7dad3d7b2319f041669f8dc7bc16a5a61bb4d65a9447f415be98d2baf2a25"}
{"level":"debug","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f80f0ee8c02c9cfe11ffec9ac4905a0f2fff12f6e4be384412884ce515878b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T21:46:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T21:46:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f80f0ee8c02c9cfe11ffec9ac4905a0f2fff12f6e4be384412884ce515878b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4b7dad3d7b2319f041669f8dc7bc16a5a61bb4d65a9447f415be98d2baf2a25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T21:46:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T21:46:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b4b7dad3d7b2319f041669f8dc7bc16a5a61bb4d65a9447f415be98d2baf2a25"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f80f0ee8c02c9cfe11ffec9ac4905a0f2fff12f6e4be384412884ce515878b2"}
{"level":"info","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4b7dad3d7b2319f041669f8dc7bc16a5a61bb4d65a9447f415be98d2baf2a25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f80f0ee8c02c9cfe11ffec9ac4905a0f2fff12f6e4be384412884ce515878b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T21:46:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T21:46:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f80f0ee8c02c9cfe11ffec9ac4905a0f2fff12f6e4be384412884ce515878b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f80f0ee8c02c9cfe11ffec9ac4905a0f2fff12f6e4be384412884ce515878b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4b7dad3d7b2319f041669f8dc7bc16a5a61bb4d65a9447f415be98d2baf2a25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T21:46:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T21:46:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4b7dad3d7b2319f041669f8dc7bc16a5a61bb4d65a9447f415be98d2baf2a25"}
{"level":"info","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4b7dad3d7b2319f041669f8dc7bc16a5a61bb4d65a9447f415be98d2baf2a25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f80f0ee8c02c9cfe11ffec9ac4905a0f2fff12f6e4be384412884ce515878b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T21:46:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T21:46:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f80f0ee8c02c9cfe11ffec9ac4905a0f2fff12f6e4be384412884ce515878b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4b7dad3d7b2319f041669f8dc7bc16a5a61bb4d65a9447f415be98d2baf2a25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T21:46:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T21:46:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b4b7dad3d7b2319f041669f8dc7bc16a5a61bb4d65a9447f415be98d2baf2a25"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f80f0ee8c02c9cfe11ffec9ac4905a0f2fff12f6e4be384412884ce515878b2"}
{"level":"info","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4b7dad3d7b2319f041669f8dc7bc16a5a61bb4d65a9447f415be98d2baf2a25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f80f0ee8c02c9cfe11ffec9ac4905a0f2fff12f6e4be384412884ce515878b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T21:46:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T21:46:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f80f0ee8c02c9cfe11ffec9ac4905a0f2fff12f6e4be384412884ce515878b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f80f0ee8c02c9cfe11ffec9ac4905a0f2fff12f6e4be384412884ce515878b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4b7dad3d7b2319f041669f8dc7bc16a5a61bb4d65a9447f415be98d2baf2a25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T21:46:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T21:46:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4b7dad3d7b2319f041669f8dc7bc16a5a61bb4d65a9447f415be98d2baf2a25"}
{"level":"info","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4b7dad3d7b2319f041669f8dc7bc16a5a61bb4d65a9447f415be98d2baf2a25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f80f0ee8c02c9cfe11ffec9ac4905a0f2fff12f6e4be384412884ce515878b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T21:46:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T21:46:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f80f0ee8c02c9cfe11ffec9ac4905a0f2fff12f6e4be384412884ce515878b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4b7dad3d7b2319f041669f8dc7bc16a5a61bb4d65a9447f415be98d2baf2a25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T21:46:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T21:46:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b4b7dad3d7b2319f041669f8dc7bc16a5a61bb4d65a9447f415be98d2baf2a25"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f80f0ee8c02c9cfe11ffec9ac4905a0f2fff12f6e4be384412884ce515878b2"}
{"level":"info","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4b7dad3d7b2319f041669f8dc7bc16a5a61bb4d65a9447f415be98d2baf2a25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f80f0ee8c02c9cfe11ffec9ac4905a0f2fff12f6e4be384412884ce515878b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T21:46:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T21:46:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f80f0ee8c02c9cfe11ffec9ac4905a0f2fff12f6e4be384412884ce515878b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f80f0ee8c02c9cfe11ffec9ac4905a0f2fff12f6e4be384412884ce515878b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4b7dad3d7b2319f041669f8dc7bc16a5a61bb4d65a9447f415be98d2baf2a25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T21:46:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T21:46:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4b7dad3d7b2319f041669f8dc7bc16a5a61bb4d65a9447f415be98d2baf2a25"}
{"level":"info","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4b7dad3d7b2319f041669f8dc7bc16a5a61bb4d65a9447f415be98d2baf2a25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f80f0ee8c02c9cfe11ffec9ac4905a0f2fff12f6e4be384412884ce515878b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T21:46:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T21:46:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f80f0ee8c02c9cfe11ffec9ac4905a0f2fff12f6e4be384412884ce515878b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4b7dad3d7b2319f041669f8dc7bc16a5a61bb4d65a9447f415be98d2baf2a25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T21:46:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T21:46:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b4b7dad3d7b2319f041669f8dc7bc16a5a61bb4d65a9447f415be98d2baf2a25"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f80f0ee8c02c9cfe11ffec9ac4905a0f2fff12f6e4be384412884ce515878b2"}
{"level":"info","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4b7dad3d7b2319f041669f8dc7bc16a5a61bb4d65a9447f415be98d2baf2a25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a9f30e7baac25f9e0d4d470c9d8c91643a32fb328c8316e049ce450bb087b89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T21:46:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T21:46:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4b7dad3d7b2319f041669f8dc7bc16a5a61bb4d65a9447f415be98d2baf2a25"}
{"level":"info","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a9f30e7baac25f9e0d4d470c9d8c91643a32fb328c8316e049ce450bb087b89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f80f0ee8c02c9cfe11ffec9ac4905a0f2fff12f6e4be384412884ce515878b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T21:46:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T21:46:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f80f0ee8c02c9cfe11ffec9ac4905a0f2fff12f6e4be384412884ce515878b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a9f30e7baac25f9e0d4d470c9d8c91643a32fb328c8316e049ce450bb087b89"}
{"level":"info","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afa5e03a08ac66021a3faf4649bbbc94c6e513885160f9390f98c5c694c54ea0"}
{"level":"info","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f80f0ee8c02c9cfe11ffec9ac4905a0f2fff12f6e4be384412884ce515878b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afa5e03a08ac66021a3faf4649bbbc94c6e513885160f9390f98c5c694c54ea0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T21:46:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T21:46:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["afa5e03a08ac66021a3faf4649bbbc94c6e513885160f9390f98c5c694c54ea0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f80f0ee8c02c9cfe11ffec9ac4905a0f2fff12f6e4be384412884ce515878b2"}
{"level":"info","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afa5e03a08ac66021a3faf4649bbbc94c6e513885160f9390f98c5c694c54ea0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4b7dad3d7b2319f041669f8dc7bc16a5a61bb4d65a9447f415be98d2baf2a25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8dfbe1c30f09335203e5facf0dcc06ebe82c41e9eccfb309d27ef2356e470567","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T21:46:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T21:46:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8dfbe1c30f09335203e5facf0dcc06ebe82c41e9eccfb309d27ef2356e470567"}
{"level":"info","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8dfbe1c30f09335203e5facf0dcc06ebe82c41e9eccfb309d27ef2356e470567","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a9f30e7baac25f9e0d4d470c9d8c91643a32fb328c8316e049ce450bb087b89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T21:46:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T21:46:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1a9f30e7baac25f9e0d4d470c9d8c91643a32fb328c8316e049ce450bb087b89"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4b7dad3d7b2319f041669f8dc7bc16a5a61bb4d65a9447f415be98d2baf2a25"}
{"level":"info","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a9f30e7baac25f9e0d4d470c9d8c91643a32fb328c8316e049ce450bb087b89"}
{"level":"info","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61cdb47370e56ec3949ba776f4a5ad74d4fe62b8960e88b83784e745d987b559"}
{"level":"info","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a9f30e7baac25f9e0d4d470c9d8c91643a32fb328c8316e049ce450bb087b89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61cdb47370e56ec3949ba776f4a5ad74d4fe62b8960e88b83784e745d987b559","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T21:46:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T21:46:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["61cdb47370e56ec3949ba776f4a5ad74d4fe62b8960e88b83784e745d987b559"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T21:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f80f0ee8c02c9cfe11ffec9ac4905a0f2fff12f6e4be384412884ce515878b2"}
{"level":"info","ts":"2026-07-17T21:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d849bcae58aa9be9f97dccd304f7fd4e25f39e6d056ca0df02ed6af0aacb6cff"}
{"level":"info","ts":"2026-07-17T21:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61cdb47370e56ec3949ba776f4a5ad74d4fe62b8960e88b83784e745d987b559","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T21:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f80f0ee8c02c9cfe11ffec9ac4905a0f2fff12f6e4be384412884ce515878b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T21:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d849bcae58aa9be9f97dccd304f7fd4e25f39e6d056ca0df02ed6af0aacb6cff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T21:46:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T21:46:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d849bcae58aa9be9f97dccd304f7fd4e25f39e6d056ca0df02ed6af0aacb6cff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T21:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/578da6a5defaa914e7d1e0b9897b2a94342b3d2a4d32cc4397aa7732a5a40f95"}
{"level":"info","ts":"2026-07-17T21:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33477d86cd40a9277b6736abf04e33fe4b7a8ed2eff9eed548e76f13f7cc4026"}
{"level":"info","ts":"2026-07-17T21:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afa5e03a08ac66021a3faf4649bbbc94c6e513885160f9390f98c5c694c54ea0"}
{"level":"info","ts":"2026-07-17T21:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d849bcae58aa9be9f97dccd304f7fd4e25f39e6d056ca0df02ed6af0aacb6cff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T21:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"578da6a5defaa914e7d1e0b9897b2a94342b3d2a4d32cc4397aa7732a5a40f95","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T21:46:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T21:46:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["578da6a5defaa914e7d1e0b9897b2a94342b3d2a4d32cc4397aa7732a5a40f95"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T21:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5a1128931acbe1ce1d32820049d769ceddbadeaf5a7a54f723f4d57850dfada"}
{"level":"info","ts":"2026-07-17T21:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f17ea4bf0231e8b0a69243860ed148c78a85bfbb4e5ffbc132b6a7ca2fa7036"}
{"level":"info","ts":"2026-07-17T21:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f1fe9d7b85f744bf503bd03d83fa6c51849e72bca706593158ca53c9a29ab3f"}
{"level":"info","ts":"2026-07-17T21:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"578da6a5defaa914e7d1e0b9897b2a94342b3d2a4d32cc4397aa7732a5a40f95","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T21:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33477d86cd40a9277b6736abf04e33fe4b7a8ed2eff9eed548e76f13f7cc4026","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T21:46:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T21:46:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33477d86cd40a9277b6736abf04e33fe4b7a8ed2eff9eed548e76f13f7cc4026"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T21:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8dfbe1c30f09335203e5facf0dcc06ebe82c41e9eccfb309d27ef2356e470567"}
{"level":"info","ts":"2026-07-17T21:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0f0e29cfe8f6415bf916284df30cf9d8f63413faf8fae46903d96bc626ef0a8"}
{"level":"info","ts":"2026-07-17T21:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33477d86cd40a9277b6736abf04e33fe4b7a8ed2eff9eed548e76f13f7cc4026","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T21:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afa5e03a08ac66021a3faf4649bbbc94c6e513885160f9390f98c5c694c54ea0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T21:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5a1128931acbe1ce1d32820049d769ceddbadeaf5a7a54f723f4d57850dfada","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T21:46:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T21:46:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5a1128931acbe1ce1d32820049d769ceddbadeaf5a7a54f723f4d57850dfada"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T21:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9be2c5c7e5e526b54207c1c4ba28571877f9549427acacf7a40f0c8a73d683bd"}
{"level":"info","ts":"2026-07-17T21:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f2b2f7bcfdbdcd03eee79f9ae5b35e5f16db0f41492c8fd152431221be33651"}
{"level":"info","ts":"2026-07-17T21:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c4b2cfeaf657f9f10ac9adb68b84522420f2a4b6bb9dd41b319fa49f38805d2"}
{"level":"info","ts":"2026-07-17T21:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5a1128931acbe1ce1d32820049d769ceddbadeaf5a7a54f723f4d57850dfada","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T21:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f17ea4bf0231e8b0a69243860ed148c78a85bfbb4e5ffbc132b6a7ca2fa7036","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T21:46:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T21:46:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f17ea4bf0231e8b0a69243860ed148c78a85bfbb4e5ffbc132b6a7ca2fa7036"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T21:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a9f30e7baac25f9e0d4d470c9d8c91643a32fb328c8316e049ce450bb087b89"}
{"level":"info","ts":"2026-07-17T21:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e3165ad7cb679a28f9345f734b543e0b7261316994db56d2fd21c8382900fa8"}
{"level":"info","ts":"2026-07-17T21:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f17ea4bf0231e8b0a69243860ed148c78a85bfbb4e5ffbc132b6a7ca2fa7036","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T21:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f1fe9d7b85f744bf503bd03d83fa6c51849e72bca706593158ca53c9a29ab3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T21:46:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T21:46:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f1fe9d7b85f744bf503bd03d83fa6c51849e72bca706593158ca53c9a29ab3f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T21:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/153bb5928d4fbf25691584e71c75326fb6aa0a46c02c24cbe2658f29a8ce9cf8"}
{"level":"info","ts":"2026-07-17T21:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61cdb47370e56ec3949ba776f4a5ad74d4fe62b8960e88b83784e745d987b559"}
{"level":"info","ts":"2026-07-17T21:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d849bcae58aa9be9f97dccd304f7fd4e25f39e6d056ca0df02ed6af0aacb6cff"}
{"level":"info","ts":"2026-07-17T21:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f1fe9d7b85f744bf503bd03d83fa6c51849e72bca706593158ca53c9a29ab3f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T21:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8dfbe1c30f09335203e5facf0dcc06ebe82c41e9eccfb309d27ef2356e470567","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T21:46:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T21:46:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8dfbe1c30f09335203e5facf0dcc06ebe82c41e9eccfb309d27ef2356e470567"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T21:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/578da6a5defaa914e7d1e0b9897b2a94342b3d2a4d32cc4397aa7732a5a40f95"}
{"level":"info","ts":"2026-07-17T21:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33477d86cd40a9277b6736abf04e33fe4b7a8ed2eff9eed548e76f13f7cc4026"}
{"level":"info","ts":"2026-07-17T21:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8dfbe1c30f09335203e5facf0dcc06ebe82c41e9eccfb309d27ef2356e470567","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T21:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0f0e29cfe8f6415bf916284df30cf9d8f63413faf8fae46903d96bc626ef0a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T21:46:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T21:46:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0f0e29cfe8f6415bf916284df30cf9d8f63413faf8fae46903d96bc626ef0a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T21:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5a1128931acbe1ce1d32820049d769ceddbadeaf5a7a54f723f4d57850dfada"}
{"level":"info","ts":"2026-07-17T21:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f17ea4bf0231e8b0a69243860ed148c78a85bfbb4e5ffbc132b6a7ca2fa7036"}
{"level":"info","ts":"2026-07-17T21:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f1fe9d7b85f744bf503bd03d83fa6c51849e72bca706593158ca53c9a29ab3f"}
{"level":"info","ts":"2026-07-17T21:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0f0e29cfe8f6415bf916284df30cf9d8f63413faf8fae46903d96bc626ef0a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T21:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9be2c5c7e5e526b54207c1c4ba28571877f9549427acacf7a40f0c8a73d683bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T21:46:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T21:46:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9be2c5c7e5e526b54207c1c4ba28571877f9549427acacf7a40f0c8a73d683bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T21:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8dfbe1c30f09335203e5facf0dcc06ebe82c41e9eccfb309d27ef2356e470567"}
{"level":"info","ts":"2026-07-17T21:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0f0e29cfe8f6415bf916284df30cf9d8f63413faf8fae46903d96bc626ef0a8"}
{"level":"info","ts":"2026-07-17T21:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9be2c5c7e5e526b54207c1c4ba28571877f9549427acacf7a40f0c8a73d683bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T21:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f2b2f7bcfdbdcd03eee79f9ae5b35e5f16db0f41492c8fd152431221be33651","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T21:46:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T21:46:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f2b2f7bcfdbdcd03eee79f9ae5b35e5f16db0f41492c8fd152431221be33651"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T21:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9be2c5c7e5e526b54207c1c4ba28571877f9549427acacf7a40f0c8a73d683bd"}
{"level":"info","ts":"2026-07-17T21:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f2b2f7bcfdbdcd03eee79f9ae5b35e5f16db0f41492c8fd152431221be33651","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T21:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c4b2cfeaf657f9f10ac9adb68b84522420f2a4b6bb9dd41b319fa49f38805d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T21:46:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T21:46:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0c4b2cfeaf657f9f10ac9adb68b84522420f2a4b6bb9dd41b319fa49f38805d2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T21:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f2b2f7bcfdbdcd03eee79f9ae5b35e5f16db0f41492c8fd152431221be33651"}
{"level":"info","ts":"2026-07-17T21:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c4b2cfeaf657f9f10ac9adb68b84522420f2a4b6bb9dd41b319fa49f38805d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T21:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a9f30e7baac25f9e0d4d470c9d8c91643a32fb328c8316e049ce450bb087b89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T21:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e3165ad7cb679a28f9345f734b543e0b7261316994db56d2fd21c8382900fa8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T21:46:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T21:46:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e3165ad7cb679a28f9345f734b543e0b7261316994db56d2fd21c8382900fa8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T21:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c4b2cfeaf657f9f10ac9adb68b84522420f2a4b6bb9dd41b319fa49f38805d2"}
{"level":"info","ts":"2026-07-17T21:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e3165ad7cb679a28f9345f734b543e0b7261316994db56d2fd21c8382900fa8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T21:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"153bb5928d4fbf25691584e71c75326fb6aa0a46c02c24cbe2658f29a8ce9cf8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T21:46:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T21:46:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["153bb5928d4fbf25691584e71c75326fb6aa0a46c02c24cbe2658f29a8ce9cf8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T21:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e3165ad7cb679a28f9345f734b543e0b7261316994db56d2fd21c8382900fa8"}
{"level":"info","ts":"2026-07-17T21:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"153bb5928d4fbf25691584e71c75326fb6aa0a46c02c24cbe2658f29a8ce9cf8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T21:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61cdb47370e56ec3949ba776f4a5ad74d4fe62b8960e88b83784e745d987b559","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T21:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d849bcae58aa9be9f97dccd304f7fd4e25f39e6d056ca0df02ed6af0aacb6cff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T21:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"578da6a5defaa914e7d1e0b9897b2a94342b3d2a4d32cc4397aa7732a5a40f95","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T21:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33477d86cd40a9277b6736abf04e33fe4b7a8ed2eff9eed548e76f13f7cc4026","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T21:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5a1128931acbe1ce1d32820049d769ceddbadeaf5a7a54f723f4d57850dfada","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T21:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f17ea4bf0231e8b0a69243860ed148c78a85bfbb4e5ffbc132b6a7ca2fa7036","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T21:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f1fe9d7b85f744bf503bd03d83fa6c51849e72bca706593158ca53c9a29ab3f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T21:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8dfbe1c30f09335203e5facf0dcc06ebe82c41e9eccfb309d27ef2356e470567","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T21:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0f0e29cfe8f6415bf916284df30cf9d8f63413faf8fae46903d96bc626ef0a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T21:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9be2c5c7e5e526b54207c1c4ba28571877f9549427acacf7a40f0c8a73d683bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T21:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f2b2f7bcfdbdcd03eee79f9ae5b35e5f16db0f41492c8fd152431221be33651","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T21:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c4b2cfeaf657f9f10ac9adb68b84522420f2a4b6bb9dd41b319fa49f38805d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T21:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e3165ad7cb679a28f9345f734b543e0b7261316994db56d2fd21c8382900fa8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T21:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"153bb5928d4fbf25691584e71c75326fb6aa0a46c02c24cbe2658f29a8ce9cf8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T21:46:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T21:46:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T21:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/153bb5928d4fbf25691584e71c75326fb6aa0a46c02c24cbe2658f29a8ce9cf8"}
{"level":"info","ts":"2026-07-17T21:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"153bb5928d4fbf25691584e71c75326fb6aa0a46c02c24cbe2658f29a8ce9cf8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T21:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"153bb5928d4fbf25691584e71c75326fb6aa0a46c02c24cbe2658f29a8ce9cf8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T21:46:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T21:46:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["153bb5928d4fbf25691584e71c75326fb6aa0a46c02c24cbe2658f29a8ce9cf8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T21:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/153bb5928d4fbf25691584e71c75326fb6aa0a46c02c24cbe2658f29a8ce9cf8"}
{"level":"info","ts":"2026-07-17T21:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"153bb5928d4fbf25691584e71c75326fb6aa0a46c02c24cbe2658f29a8ce9cf8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T21:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"153bb5928d4fbf25691584e71c75326fb6aa0a46c02c24cbe2658f29a8ce9cf8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T21:46:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T21:46:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["153bb5928d4fbf25691584e71c75326fb6aa0a46c02c24cbe2658f29a8ce9cf8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T21:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/153bb5928d4fbf25691584e71c75326fb6aa0a46c02c24cbe2658f29a8ce9cf8"}
{"level":"error","ts":"2026-07-17T21:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"153bb5928d4fbf25691584e71c75326fb6aa0a46c02c24cbe2658f29a8ce9cf8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"153bb5928d4fbf25691584e71c75326fb6aa0a46c02c24cbe2658f29a8ce9cf8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-17T21:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"153bb5928d4fbf25691584e71c75326fb6aa0a46c02c24cbe2658f29a8ce9cf8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T21:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"153bb5928d4fbf25691584e71c75326fb6aa0a46c02c24cbe2658f29a8ce9cf8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T21:46:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a0a6b7a1-c537-47b5-80a9-7003ed67cf6f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:33228","PortSpecifier":{"PortValue":33228}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a0a6b7a1-c537-47b5-80a9-7003ed67cf6f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-f631c8.apps.5619e8f8-5334-4bf4-9151-4188adcef522.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-17T21:46:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a0a6b7a1-c537-47b5-80a9-7003ed67cf6f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:33228","PortSpecifier":{"PortValue":33228}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784324819,"nanos":81861276},"http":{"id":"a0a6b7a1-c537-47b5-80a9-7003ed67cf6f","method":"POST","headers":{":authority":"e2e-shared-a-f631c8.apps.5619e8f8-5334-4bf4-9151-4188adcef522.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T21:46:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a0a6b7a1-c537-47b5-80a9-7003ed67cf6f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-17T21:46:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a0a6b7a1-c537-47b5-80a9-7003ed67cf6f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6dabf2af-7679-4d2c-9cd8-68fb046f8977","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9979b932-ab1d-4aad-96e0-c46552cddd14"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4188adcef522"]}}
{"level":"debug","ts":"2026-07-17T21:46:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a0a6b7a1-c537-47b5-80a9-7003ed67cf6f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4188adcef522"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9979b932-ab1d-4aad-96e0-c46552cddd14"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6dabf2af-7679-4d2c-9cd8-68fb046f8977","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"153bb5928d4fbf25691584e71c75326fb6aa0a46c02c24cbe2658f29a8ce9cf8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f631c8.apps.5619e8f8-5334-4bf4-9151-4188adcef522.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T21:46:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a0a6b7a1-c537-47b5-80a9-7003ed67cf6f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T21:46:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a0a6b7a1-c537-47b5-80a9-7003ed67cf6f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T21:46:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a0a6b7a1-c537-47b5-80a9-7003ed67cf6f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f631c8/rate-test-model-f631c8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-f631c8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T21:46:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a0a6b7a1-c537-47b5-80a9-7003ed67cf6f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-17T21:46:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a0a6b7a1-c537-47b5-80a9-7003ed67cf6f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-17T21:46:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a0a6b7a1-c537-47b5-80a9-7003ed67cf6f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-17T21:46:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a0a6b7a1-c537-47b5-80a9-7003ed67cf6f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-17T21:46:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a0a6b7a1-c537-47b5-80a9-7003ed67cf6f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-17T21:46:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"52b51012-3383-40e6-9ba1-38d7d7b4b2ac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:48338","PortSpecifier":{"PortValue":48338}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"52b51012-3383-40e6-9ba1-38d7d7b4b2ac","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-d5e469.apps.5619e8f8-5334-4bf4-9151-4188adcef522.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-17T21:46:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"52b51012-3383-40e6-9ba1-38d7d7b4b2ac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:48338","PortSpecifier":{"PortValue":48338}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784324819,"nanos":117173796},"http":{"id":"52b51012-3383-40e6-9ba1-38d7d7b4b2ac","method":"POST","headers":{":authority":"e2e-shared-b-d5e469.apps.5619e8f8-5334-4bf4-9151-4188adcef522.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T21:46:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"52b51012-3383-40e6-9ba1-38d7d7b4b2ac","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-17T21:46:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"52b51012-3383-40e6-9ba1-38d7d7b4b2ac","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6dabf2af-7679-4d2c-9cd8-68fb046f8977","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9979b932-ab1d-4aad-96e0-c46552cddd14"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4188adcef522"]}}
{"level":"debug","ts":"2026-07-17T21:46:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"52b51012-3383-40e6-9ba1-38d7d7b4b2ac","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4188adcef522"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9979b932-ab1d-4aad-96e0-c46552cddd14"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6dabf2af-7679-4d2c-9cd8-68fb046f8977","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8e3165ad7cb679a28f9345f734b543e0b7261316994db56d2fd21c8382900fa8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d5e469.apps.5619e8f8-5334-4bf4-9151-4188adcef522.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T21:46:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52b51012-3383-40e6-9ba1-38d7d7b4b2ac","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T21:46:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52b51012-3383-40e6-9ba1-38d7d7b4b2ac","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T21:46:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52b51012-3383-40e6-9ba1-38d7d7b4b2ac","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d5e469/rate-test-model-d5e469\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-d5e469/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T21:46:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"52b51012-3383-40e6-9ba1-38d7d7b4b2ac","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-17T21:46:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"52b51012-3383-40e6-9ba1-38d7d7b4b2ac","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-17T21:46:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"52b51012-3383-40e6-9ba1-38d7d7b4b2ac","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-17T21:46:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"52b51012-3383-40e6-9ba1-38d7d7b4b2ac","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-17T21:46:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"52b51012-3383-40e6-9ba1-38d7d7b4b2ac","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-17T21:46:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bc3bca6f-9b45-4399-bbe4-efdbb93cb52a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:33230","PortSpecifier":{"PortValue":33230}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bc3bca6f-9b45-4399-bbe4-efdbb93cb52a","method":"POST","path":"/ai-tenant-e2e-shared-a-f631c8/rate-test-model-f631c8/v1/completions","host":"e2e-shared-a-f631c8.apps.5619e8f8-5334-4bf4-9151-4188adcef522.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-17T21:46:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bc3bca6f-9b45-4399-bbe4-efdbb93cb52a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:33230","PortSpecifier":{"PortValue":33230}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784324819,"nanos":152754256},"http":{"id":"bc3bca6f-9b45-4399-bbe4-efdbb93cb52a","method":"POST","headers":{":authority":"e2e-shared-a-f631c8.apps.5619e8f8-5334-4bf4-9151-4188adcef522.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-f631c8/rate-test-model-f631c8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T21:46:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bc3bca6f-9b45-4399-bbe4-efdbb93cb52a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Upy7XBdf2ReFf1I4_QvtgxLHM0OSZpi2t4EKw0O0gsWw1Qj9IUFwRHX81Wtb"}
{"level":"debug","ts":"2026-07-17T21:46:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bc3bca6f-9b45-4399-bbe4-efdbb93cb52a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f631c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Upy7XBdf2ReFf1I4_QvtgxLHM0OSZpi2t4EKw0O0gsWw1Qj9IUFwRHX81Wtb\"}"}
{"level":"debug","ts":"2026-07-17T21:46:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bc3bca6f-9b45-4399-bbe4-efdbb93cb52a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f631c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"44d946dc-f793-401e-9aec-03d19d097ebc","keyName":"e2e-rate-a-13fd64","subscription":"e2e-rate-iso-a-13fd64","tenant":"e2e-shared-a-f631c8","userId":"44d946dc-f793-401e-9aec-03d19d097ebc","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-17T21:46:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bc3bca6f-9b45-4399-bbe4-efdbb93cb52a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-f631c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-f631c8/rate-test-model-f631c8\",\"requestedSubscription\":\"e2e-rate-iso-a-13fd64\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-17T21:46:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bc3bca6f-9b45-4399-bbe4-efdbb93cb52a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f631c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-f631c8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-13fd64","namespace":"ai-tenant-e2e-shared-a-f631c8","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-17T21:46:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bc3bca6f-9b45-4399-bbe4-efdbb93cb52a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T21:46:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bc3bca6f-9b45-4399-bbe4-efdbb93cb52a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T21:46:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bc3bca6f-9b45-4399-bbe4-efdbb93cb52a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T21:46:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bc3bca6f-9b45-4399-bbe4-efdbb93cb52a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T21:46:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bc3bca6f-9b45-4399-bbe4-efdbb93cb52a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f631c8/rate-test-model-f631c8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-f631c8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T21:46:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bc3bca6f-9b45-4399-bbe4-efdbb93cb52a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-17T21:46:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bc3bca6f-9b45-4399-bbe4-efdbb93cb52a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-17T21:46:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bc3bca6f-9b45-4399-bbe4-efdbb93cb52a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-13fd64"}
{"level":"debug","ts":"2026-07-17T21:46:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bc3bca6f-9b45-4399-bbe4-efdbb93cb52a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"44d946dc-f793-401e-9aec-03d19d097ebc","keyName":"e2e-rate-a-13fd64","selected_subscription":"e2e-rate-iso-a-13fd64","selected_subscription_key":"ai-tenant-e2e-shared-a-f631c8/e2e-rate-iso-a-13fd64@ai-tenant-e2e-shared-a-f631c8/rate-test-model-f631c8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-f631c8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-13fd64","namespace":"ai-tenant-e2e-shared-a-f631c8","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-17T21:46:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bc3bca6f-9b45-4399-bbe4-efdbb93cb52a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-17T21:46:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bc3bca6f-9b45-4399-bbe4-efdbb93cb52a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-17T21:47:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"659627bd-4101-4940-aef1-e02824dba8aa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:49626","PortSpecifier":{"PortValue":49626}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"659627bd-4101-4940-aef1-e02824dba8aa","method":"POST","path":"/ai-tenant-e2e-shared-a-f631c8/rate-test-model-f631c8/v1/completions","host":"e2e-shared-a-f631c8.apps.5619e8f8-5334-4bf4-9151-4188adcef522.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-17T21:47:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"659627bd-4101-4940-aef1-e02824dba8aa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:49626","PortSpecifier":{"PortValue":49626}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784324820,"nanos":199309972},"http":{"id":"659627bd-4101-4940-aef1-e02824dba8aa","method":"POST","headers":{":authority":"e2e-shared-a-f631c8.apps.5619e8f8-5334-4bf4-9151-4188adcef522.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-f631c8/rate-test-model-f631c8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T21:47:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"659627bd-4101-4940-aef1-e02824dba8aa","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Upy7XBdf2ReFf1I4_QvtgxLHM0OSZpi2t4EKw0O0gsWw1Qj9IUFwRHX81Wtb"}
{"level":"debug","ts":"2026-07-17T21:47:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"659627bd-4101-4940-aef1-e02824dba8aa","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f631c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Upy7XBdf2ReFf1I4_QvtgxLHM0OSZpi2t4EKw0O0gsWw1Qj9IUFwRHX81Wtb\"}"}
{"level":"debug","ts":"2026-07-17T21:47:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"659627bd-4101-4940-aef1-e02824dba8aa","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f631c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"44d946dc-f793-401e-9aec-03d19d097ebc","keyName":"e2e-rate-a-13fd64","subscription":"e2e-rate-iso-a-13fd64","tenant":"e2e-shared-a-f631c8","userId":"44d946dc-f793-401e-9aec-03d19d097ebc","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-17T21:47:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"659627bd-4101-4940-aef1-e02824dba8aa","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-f631c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-f631c8/rate-test-model-f631c8\",\"requestedSubscription\":\"e2e-rate-iso-a-13fd64\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-17T21:47:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"659627bd-4101-4940-aef1-e02824dba8aa","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f631c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-f631c8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-13fd64","namespace":"ai-tenant-e2e-shared-a-f631c8","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-17T21:47:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"659627bd-4101-4940-aef1-e02824dba8aa","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T21:47:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"659627bd-4101-4940-aef1-e02824dba8aa","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T21:47:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"659627bd-4101-4940-aef1-e02824dba8aa","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T21:47:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"659627bd-4101-4940-aef1-e02824dba8aa","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f631c8/rate-test-model-f631c8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-f631c8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T21:47:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"659627bd-4101-4940-aef1-e02824dba8aa","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T21:47:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"659627bd-4101-4940-aef1-e02824dba8aa","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-13fd64"}
{"level":"debug","ts":"2026-07-17T21:47:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"659627bd-4101-4940-aef1-e02824dba8aa","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-17T21:47:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"659627bd-4101-4940-aef1-e02824dba8aa","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-17T21:47:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"659627bd-4101-4940-aef1-e02824dba8aa","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"44d946dc-f793-401e-9aec-03d19d097ebc","keyName":"e2e-rate-a-13fd64","selected_subscription":"e2e-rate-iso-a-13fd64","selected_subscription_key":"ai-tenant-e2e-shared-a-f631c8/e2e-rate-iso-a-13fd64@ai-tenant-e2e-shared-a-f631c8/rate-test-model-f631c8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-f631c8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-13fd64","namespace":"ai-tenant-e2e-shared-a-f631c8","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-17T21:47:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"659627bd-4101-4940-aef1-e02824dba8aa","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-17T21:47:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"659627bd-4101-4940-aef1-e02824dba8aa","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-17T21:47:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5298329b-e544-409d-9bf4-e3bc46c266cc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:49640","PortSpecifier":{"PortValue":49640}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5298329b-e544-409d-9bf4-e3bc46c266cc","method":"POST","path":"/ai-tenant-e2e-shared-a-f631c8/rate-test-model-f631c8/v1/completions","host":"e2e-shared-a-f631c8.apps.5619e8f8-5334-4bf4-9151-4188adcef522.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-17T21:47:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5298329b-e544-409d-9bf4-e3bc46c266cc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:49640","PortSpecifier":{"PortValue":49640}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784324821,"nanos":234253288},"http":{"id":"5298329b-e544-409d-9bf4-e3bc46c266cc","method":"POST","headers":{":authority":"e2e-shared-a-f631c8.apps.5619e8f8-5334-4bf4-9151-4188adcef522.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-f631c8/rate-test-model-f631c8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T21:47:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5298329b-e544-409d-9bf4-e3bc46c266cc","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Upy7XBdf2ReFf1I4_QvtgxLHM0OSZpi2t4EKw0O0gsWw1Qj9IUFwRHX81Wtb"}
{"level":"debug","ts":"2026-07-17T21:47:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5298329b-e544-409d-9bf4-e3bc46c266cc","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f631c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Upy7XBdf2ReFf1I4_QvtgxLHM0OSZpi2t4EKw0O0gsWw1Qj9IUFwRHX81Wtb\"}"}
{"level":"debug","ts":"2026-07-17T21:47:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5298329b-e544-409d-9bf4-e3bc46c266cc","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f631c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"44d946dc-f793-401e-9aec-03d19d097ebc","keyName":"e2e-rate-a-13fd64","subscription":"e2e-rate-iso-a-13fd64","tenant":"e2e-shared-a-f631c8","userId":"44d946dc-f793-401e-9aec-03d19d097ebc","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-17T21:47:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5298329b-e544-409d-9bf4-e3bc46c266cc","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-f631c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-f631c8/rate-test-model-f631c8\",\"requestedSubscription\":\"e2e-rate-iso-a-13fd64\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-17T21:47:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5298329b-e544-409d-9bf4-e3bc46c266cc","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f631c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-f631c8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-13fd64","namespace":"ai-tenant-e2e-shared-a-f631c8","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-17T21:47:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5298329b-e544-409d-9bf4-e3bc46c266cc","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T21:47:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5298329b-e544-409d-9bf4-e3bc46c266cc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T21:47:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5298329b-e544-409d-9bf4-e3bc46c266cc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T21:47:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5298329b-e544-409d-9bf4-e3bc46c266cc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f631c8/rate-test-model-f631c8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-f631c8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T21:47:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5298329b-e544-409d-9bf4-e3bc46c266cc","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T21:47:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5298329b-e544-409d-9bf4-e3bc46c266cc","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-17T21:47:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5298329b-e544-409d-9bf4-e3bc46c266cc","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-13fd64"}
{"level":"debug","ts":"2026-07-17T21:47:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5298329b-e544-409d-9bf4-e3bc46c266cc","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-17T21:47:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5298329b-e544-409d-9bf4-e3bc46c266cc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"44d946dc-f793-401e-9aec-03d19d097ebc","keyName":"e2e-rate-a-13fd64","selected_subscription":"e2e-rate-iso-a-13fd64","selected_subscription_key":"ai-tenant-e2e-shared-a-f631c8/e2e-rate-iso-a-13fd64@ai-tenant-e2e-shared-a-f631c8/rate-test-model-f631c8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-f631c8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-13fd64","namespace":"ai-tenant-e2e-shared-a-f631c8","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-17T21:47:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5298329b-e544-409d-9bf4-e3bc46c266cc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-17T21:47:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5298329b-e544-409d-9bf4-e3bc46c266cc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-17T21:47:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5ae3e96d-fb7d-4b69-a256-a45dd03255a7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:57920","PortSpecifier":{"PortValue":57920}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5ae3e96d-fb7d-4b69-a256-a45dd03255a7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-f631c8.apps.5619e8f8-5334-4bf4-9151-4188adcef522.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-17T21:47:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5ae3e96d-fb7d-4b69-a256-a45dd03255a7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:57920","PortSpecifier":{"PortValue":57920}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784324832,"nanos":63577173},"http":{"id":"5ae3e96d-fb7d-4b69-a256-a45dd03255a7","method":"POST","headers":{":authority":"e2e-shared-a-f631c8.apps.5619e8f8-5334-4bf4-9151-4188adcef522.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T21:47:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5ae3e96d-fb7d-4b69-a256-a45dd03255a7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-17T21:47:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5ae3e96d-fb7d-4b69-a256-a45dd03255a7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6dabf2af-7679-4d2c-9cd8-68fb046f8977","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9979b932-ab1d-4aad-96e0-c46552cddd14"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4188adcef522"]}}
{"level":"debug","ts":"2026-07-17T21:47:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5ae3e96d-fb7d-4b69-a256-a45dd03255a7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4188adcef522"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9979b932-ab1d-4aad-96e0-c46552cddd14"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6dabf2af-7679-4d2c-9cd8-68fb046f8977","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"153bb5928d4fbf25691584e71c75326fb6aa0a46c02c24cbe2658f29a8ce9cf8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f631c8.apps.5619e8f8-5334-4bf4-9151-4188adcef522.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T21:47:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ae3e96d-fb7d-4b69-a256-a45dd03255a7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T21:47:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ae3e96d-fb7d-4b69-a256-a45dd03255a7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T21:47:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ae3e96d-fb7d-4b69-a256-a45dd03255a7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f631c8/rate-test-model-f631c8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-f631c8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T21:47:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5ae3e96d-fb7d-4b69-a256-a45dd03255a7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-17T21:47:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ae3e96d-fb7d-4b69-a256-a45dd03255a7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-17T21:47:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ae3e96d-fb7d-4b69-a256-a45dd03255a7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-17T21:47:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5ae3e96d-fb7d-4b69-a256-a45dd03255a7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-17T21:47:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5ae3e96d-fb7d-4b69-a256-a45dd03255a7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-17T21:47:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1dc37c98-6b84-4b3e-82dc-e467adb2ff0c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:36098","PortSpecifier":{"PortValue":36098}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1dc37c98-6b84-4b3e-82dc-e467adb2ff0c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-d5e469.apps.5619e8f8-5334-4bf4-9151-4188adcef522.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-17T21:47:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1dc37c98-6b84-4b3e-82dc-e467adb2ff0c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:36098","PortSpecifier":{"PortValue":36098}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784324832,"nanos":105941497},"http":{"id":"1dc37c98-6b84-4b3e-82dc-e467adb2ff0c","method":"POST","headers":{":authority":"e2e-shared-b-d5e469.apps.5619e8f8-5334-4bf4-9151-4188adcef522.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T21:47:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1dc37c98-6b84-4b3e-82dc-e467adb2ff0c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-17T21:47:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1dc37c98-6b84-4b3e-82dc-e467adb2ff0c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6dabf2af-7679-4d2c-9cd8-68fb046f8977","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9979b932-ab1d-4aad-96e0-c46552cddd14"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4188adcef522"]}}
{"level":"debug","ts":"2026-07-17T21:47:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1dc37c98-6b84-4b3e-82dc-e467adb2ff0c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4188adcef522"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9979b932-ab1d-4aad-96e0-c46552cddd14"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6dabf2af-7679-4d2c-9cd8-68fb046f8977","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8e3165ad7cb679a28f9345f734b543e0b7261316994db56d2fd21c8382900fa8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d5e469.apps.5619e8f8-5334-4bf4-9151-4188adcef522.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T21:47:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1dc37c98-6b84-4b3e-82dc-e467adb2ff0c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T21:47:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1dc37c98-6b84-4b3e-82dc-e467adb2ff0c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T21:47:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1dc37c98-6b84-4b3e-82dc-e467adb2ff0c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d5e469/rate-test-model-d5e469\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-d5e469/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T21:47:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1dc37c98-6b84-4b3e-82dc-e467adb2ff0c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-17T21:47:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1dc37c98-6b84-4b3e-82dc-e467adb2ff0c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-17T21:47:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1dc37c98-6b84-4b3e-82dc-e467adb2ff0c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-17T21:47:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1dc37c98-6b84-4b3e-82dc-e467adb2ff0c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-17T21:47:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1dc37c98-6b84-4b3e-82dc-e467adb2ff0c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-17T21:47:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e5ee7fee-b079-44ea-8967-9606aaef35c7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:57936","PortSpecifier":{"PortValue":57936}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e5ee7fee-b079-44ea-8967-9606aaef35c7","method":"POST","path":"/ai-tenant-e2e-shared-a-f631c8/rate-test-model-f631c8/v1/completions","host":"e2e-shared-a-f631c8.apps.5619e8f8-5334-4bf4-9151-4188adcef522.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-17T21:47:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e5ee7fee-b079-44ea-8967-9606aaef35c7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:57936","PortSpecifier":{"PortValue":57936}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784324832,"nanos":142972117},"http":{"id":"e5ee7fee-b079-44ea-8967-9606aaef35c7","method":"POST","headers":{":authority":"e2e-shared-a-f631c8.apps.5619e8f8-5334-4bf4-9151-4188adcef522.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-f631c8/rate-test-model-f631c8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T21:47:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e5ee7fee-b079-44ea-8967-9606aaef35c7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1ZeTJLWLdjNPp10Xo_CmTRQL1zO9eWbaTIqPtPwdljra3e7pwtjXBcJt3Rdwo"}
{"level":"debug","ts":"2026-07-17T21:47:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e5ee7fee-b079-44ea-8967-9606aaef35c7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f631c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1ZeTJLWLdjNPp10Xo_CmTRQL1zO9eWbaTIqPtPwdljra3e7pwtjXBcJt3Rdwo\"}"}
{"level":"debug","ts":"2026-07-17T21:47:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e5ee7fee-b079-44ea-8967-9606aaef35c7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f631c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b7e26d4b-1f17-4ae6-a792-d74f56126d96","keyName":"e2e-rate-a-c706ee","subscription":"e2e-rate-iso-a-c706ee","tenant":"e2e-shared-a-f631c8","userId":"b7e26d4b-1f17-4ae6-a792-d74f56126d96","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-17T21:47:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e5ee7fee-b079-44ea-8967-9606aaef35c7","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-f631c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-f631c8/rate-test-model-f631c8\",\"requestedSubscription\":\"e2e-rate-iso-a-c706ee\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-17T21:47:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e5ee7fee-b079-44ea-8967-9606aaef35c7","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f631c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-f631c8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c706ee","namespace":"ai-tenant-e2e-shared-a-f631c8","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-17T21:47:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e5ee7fee-b079-44ea-8967-9606aaef35c7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T21:47:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e5ee7fee-b079-44ea-8967-9606aaef35c7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T21:47:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e5ee7fee-b079-44ea-8967-9606aaef35c7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T21:47:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e5ee7fee-b079-44ea-8967-9606aaef35c7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f631c8/rate-test-model-f631c8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-f631c8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T21:47:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e5ee7fee-b079-44ea-8967-9606aaef35c7","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T21:47:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e5ee7fee-b079-44ea-8967-9606aaef35c7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-17T21:47:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e5ee7fee-b079-44ea-8967-9606aaef35c7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-c706ee"}
{"level":"debug","ts":"2026-07-17T21:47:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e5ee7fee-b079-44ea-8967-9606aaef35c7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-17T21:47:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e5ee7fee-b079-44ea-8967-9606aaef35c7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b7e26d4b-1f17-4ae6-a792-d74f56126d96","keyName":"e2e-rate-a-c706ee","selected_subscription":"e2e-rate-iso-a-c706ee","selected_subscription_key":"ai-tenant-e2e-shared-a-f631c8/e2e-rate-iso-a-c706ee@ai-tenant-e2e-shared-a-f631c8/rate-test-model-f631c8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-f631c8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c706ee","namespace":"ai-tenant-e2e-shared-a-f631c8","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-17T21:47:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e5ee7fee-b079-44ea-8967-9606aaef35c7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-17T21:47:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e5ee7fee-b079-44ea-8967-9606aaef35c7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-17T21:47:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"06e5c4dd-ab34-47b7-94af-e25838c4384a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:57938","PortSpecifier":{"PortValue":57938}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"06e5c4dd-ab34-47b7-94af-e25838c4384a","method":"POST","path":"/ai-tenant-e2e-shared-a-f631c8/rate-test-model-f631c8/v1/completions","host":"e2e-shared-a-f631c8.apps.5619e8f8-5334-4bf4-9151-4188adcef522.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-17T21:47:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"06e5c4dd-ab34-47b7-94af-e25838c4384a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:57938","PortSpecifier":{"PortValue":57938}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784324833,"nanos":182598894},"http":{"id":"06e5c4dd-ab34-47b7-94af-e25838c4384a","method":"POST","headers":{":authority":"e2e-shared-a-f631c8.apps.5619e8f8-5334-4bf4-9151-4188adcef522.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-f631c8/rate-test-model-f631c8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T21:47:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"06e5c4dd-ab34-47b7-94af-e25838c4384a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1ZeTJLWLdjNPp10Xo_CmTRQL1zO9eWbaTIqPtPwdljra3e7pwtjXBcJt3Rdwo"}
{"level":"debug","ts":"2026-07-17T21:47:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"06e5c4dd-ab34-47b7-94af-e25838c4384a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f631c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1ZeTJLWLdjNPp10Xo_CmTRQL1zO9eWbaTIqPtPwdljra3e7pwtjXBcJt3Rdwo\"}"}
{"level":"debug","ts":"2026-07-17T21:47:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"06e5c4dd-ab34-47b7-94af-e25838c4384a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f631c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b7e26d4b-1f17-4ae6-a792-d74f56126d96","keyName":"e2e-rate-a-c706ee","subscription":"e2e-rate-iso-a-c706ee","tenant":"e2e-shared-a-f631c8","userId":"b7e26d4b-1f17-4ae6-a792-d74f56126d96","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-17T21:47:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"06e5c4dd-ab34-47b7-94af-e25838c4384a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-f631c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-f631c8/rate-test-model-f631c8\",\"requestedSubscription\":\"e2e-rate-iso-a-c706ee\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-17T21:47:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"06e5c4dd-ab34-47b7-94af-e25838c4384a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f631c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-f631c8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c706ee","namespace":"ai-tenant-e2e-shared-a-f631c8","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-17T21:47:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"06e5c4dd-ab34-47b7-94af-e25838c4384a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T21:47:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"06e5c4dd-ab34-47b7-94af-e25838c4384a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T21:47:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"06e5c4dd-ab34-47b7-94af-e25838c4384a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T21:47:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"06e5c4dd-ab34-47b7-94af-e25838c4384a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f631c8/rate-test-model-f631c8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-f631c8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T21:47:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"06e5c4dd-ab34-47b7-94af-e25838c4384a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T21:47:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"06e5c4dd-ab34-47b7-94af-e25838c4384a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-17T21:47:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"06e5c4dd-ab34-47b7-94af-e25838c4384a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-c706ee"}
{"level":"debug","ts":"2026-07-17T21:47:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"06e5c4dd-ab34-47b7-94af-e25838c4384a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-17T21:47:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"06e5c4dd-ab34-47b7-94af-e25838c4384a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b7e26d4b-1f17-4ae6-a792-d74f56126d96","keyName":"e2e-rate-a-c706ee","selected_subscription":"e2e-rate-iso-a-c706ee","selected_subscription_key":"ai-tenant-e2e-shared-a-f631c8/e2e-rate-iso-a-c706ee@ai-tenant-e2e-shared-a-f631c8/rate-test-model-f631c8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-f631c8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c706ee","namespace":"ai-tenant-e2e-shared-a-f631c8","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-17T21:47:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"06e5c4dd-ab34-47b7-94af-e25838c4384a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-17T21:47:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"06e5c4dd-ab34-47b7-94af-e25838c4384a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-17T21:47:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"339e5310-cdfc-44a9-9f20-54580d4de0f4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:57954","PortSpecifier":{"PortValue":57954}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"339e5310-cdfc-44a9-9f20-54580d4de0f4","method":"POST","path":"/ai-tenant-e2e-shared-a-f631c8/rate-test-model-f631c8/v1/completions","host":"e2e-shared-a-f631c8.apps.5619e8f8-5334-4bf4-9151-4188adcef522.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-17T21:47:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"339e5310-cdfc-44a9-9f20-54580d4de0f4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:57954","PortSpecifier":{"PortValue":57954}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784324834,"nanos":222816307},"http":{"id":"339e5310-cdfc-44a9-9f20-54580d4de0f4","method":"POST","headers":{":authority":"e2e-shared-a-f631c8.apps.5619e8f8-5334-4bf4-9151-4188adcef522.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-f631c8/rate-test-model-f631c8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T21:47:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"339e5310-cdfc-44a9-9f20-54580d4de0f4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1ZeTJLWLdjNPp10Xo_CmTRQL1zO9eWbaTIqPtPwdljra3e7pwtjXBcJt3Rdwo"}
{"level":"debug","ts":"2026-07-17T21:47:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"339e5310-cdfc-44a9-9f20-54580d4de0f4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f631c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1ZeTJLWLdjNPp10Xo_CmTRQL1zO9eWbaTIqPtPwdljra3e7pwtjXBcJt3Rdwo\"}"}
{"level":"debug","ts":"2026-07-17T21:47:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"339e5310-cdfc-44a9-9f20-54580d4de0f4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f631c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b7e26d4b-1f17-4ae6-a792-d74f56126d96","keyName":"e2e-rate-a-c706ee","subscription":"e2e-rate-iso-a-c706ee","tenant":"e2e-shared-a-f631c8","userId":"b7e26d4b-1f17-4ae6-a792-d74f56126d96","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-17T21:47:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"339e5310-cdfc-44a9-9f20-54580d4de0f4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-f631c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-f631c8/rate-test-model-f631c8\",\"requestedSubscription\":\"e2e-rate-iso-a-c706ee\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-17T21:47:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"339e5310-cdfc-44a9-9f20-54580d4de0f4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f631c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-f631c8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c706ee","namespace":"ai-tenant-e2e-shared-a-f631c8","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-17T21:47:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"339e5310-cdfc-44a9-9f20-54580d4de0f4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T21:47:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"339e5310-cdfc-44a9-9f20-54580d4de0f4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T21:47:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"339e5310-cdfc-44a9-9f20-54580d4de0f4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T21:47:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"339e5310-cdfc-44a9-9f20-54580d4de0f4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T21:47:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"339e5310-cdfc-44a9-9f20-54580d4de0f4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f631c8/rate-test-model-f631c8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-f631c8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T21:47:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"339e5310-cdfc-44a9-9f20-54580d4de0f4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-17T21:47:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"339e5310-cdfc-44a9-9f20-54580d4de0f4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-c706ee"}
{"level":"debug","ts":"2026-07-17T21:47:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"339e5310-cdfc-44a9-9f20-54580d4de0f4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-17T21:47:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"339e5310-cdfc-44a9-9f20-54580d4de0f4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b7e26d4b-1f17-4ae6-a792-d74f56126d96","keyName":"e2e-rate-a-c706ee","selected_subscription":"e2e-rate-iso-a-c706ee","selected_subscription_key":"ai-tenant-e2e-shared-a-f631c8/e2e-rate-iso-a-c706ee@ai-tenant-e2e-shared-a-f631c8/rate-test-model-f631c8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-f631c8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c706ee","namespace":"ai-tenant-e2e-shared-a-f631c8","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-17T21:47:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"339e5310-cdfc-44a9-9f20-54580d4de0f4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-17T21:47:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"339e5310-cdfc-44a9-9f20-54580d4de0f4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-17T21:47:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"887367bd-4b60-45fb-b01a-ab7723f9a631","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:36100","PortSpecifier":{"PortValue":36100}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"887367bd-4b60-45fb-b01a-ab7723f9a631","method":"POST","path":"/ai-tenant-e2e-shared-b-d5e469/rate-test-model-d5e469/v1/completions","host":"e2e-shared-b-d5e469.apps.5619e8f8-5334-4bf4-9151-4188adcef522.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-17T21:47:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"887367bd-4b60-45fb-b01a-ab7723f9a631","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:36100","PortSpecifier":{"PortValue":36100}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784324834,"nanos":260059294},"http":{"id":"887367bd-4b60-45fb-b01a-ab7723f9a631","method":"POST","headers":{":authority":"e2e-shared-b-d5e469.apps.5619e8f8-5334-4bf4-9151-4188adcef522.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-d5e469/rate-test-model-d5e469/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T21:47:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"887367bd-4b60-45fb-b01a-ab7723f9a631","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-19mQvj31iNmSTHU6K_7oxof0Kng4KaLqhkP34kxL0SSn0UhvOu3tb5X2klSPh"}
{"level":"debug","ts":"2026-07-17T21:47:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"887367bd-4b60-45fb-b01a-ab7723f9a631","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-d5e469.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-19mQvj31iNmSTHU6K_7oxof0Kng4KaLqhkP34kxL0SSn0UhvOu3tb5X2klSPh\"}"}
{"level":"debug","ts":"2026-07-17T21:47:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"887367bd-4b60-45fb-b01a-ab7723f9a631","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-d5e469.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"36433bb4-2aba-4573-8538-ef201ea72abf","keyName":"e2e-rate-b-c706ee","subscription":"e2e-rate-iso-b-c706ee","tenant":"e2e-shared-b-d5e469","userId":"36433bb4-2aba-4573-8538-ef201ea72abf","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-17T21:47:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"887367bd-4b60-45fb-b01a-ab7723f9a631","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-d5e469.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-d5e469/rate-test-model-d5e469\",\"requestedSubscription\":\"e2e-rate-iso-b-c706ee\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-17T21:47:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"887367bd-4b60-45fb-b01a-ab7723f9a631","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-d5e469.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d5e469","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-c706ee","namespace":"ai-tenant-e2e-shared-b-d5e469","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-17T21:47:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"887367bd-4b60-45fb-b01a-ab7723f9a631","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T21:47:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"887367bd-4b60-45fb-b01a-ab7723f9a631","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T21:47:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"887367bd-4b60-45fb-b01a-ab7723f9a631","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T21:47:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"887367bd-4b60-45fb-b01a-ab7723f9a631","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T21:47:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"887367bd-4b60-45fb-b01a-ab7723f9a631","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d5e469/rate-test-model-d5e469\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-d5e469/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T21:47:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"887367bd-4b60-45fb-b01a-ab7723f9a631","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-17T21:47:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"887367bd-4b60-45fb-b01a-ab7723f9a631","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-c706ee"}
{"level":"debug","ts":"2026-07-17T21:47:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"887367bd-4b60-45fb-b01a-ab7723f9a631","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-17T21:47:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"887367bd-4b60-45fb-b01a-ab7723f9a631","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"36433bb4-2aba-4573-8538-ef201ea72abf","keyName":"e2e-rate-b-c706ee","selected_subscription":"e2e-rate-iso-b-c706ee","selected_subscription_key":"ai-tenant-e2e-shared-b-d5e469/e2e-rate-iso-b-c706ee@ai-tenant-e2e-shared-b-d5e469/rate-test-model-d5e469","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d5e469","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-c706ee","namespace":"ai-tenant-e2e-shared-b-d5e469","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-17T21:47:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"887367bd-4b60-45fb-b01a-ab7723f9a631","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-17T21:47:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"887367bd-4b60-45fb-b01a-ab7723f9a631","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-17T21:47:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6f80f0ee8c02c9cfe11ffec9ac4905a0f2fff12f6e4be384412884ce515878b2"}
{"level":"info","ts":"2026-07-17T21:47:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d849bcae58aa9be9f97dccd304f7fd4e25f39e6d056ca0df02ed6af0aacb6cff"}
{"level":"info","ts":"2026-07-17T21:47:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0c4b2cfeaf657f9f10ac9adb68b84522420f2a4b6bb9dd41b319fa49f38805d2"}
{"level":"info","ts":"2026-07-17T21:47:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9f2b2f7bcfdbdcd03eee79f9ae5b35e5f16db0f41492c8fd152431221be33651"}
{"level":"info","ts":"2026-07-17T21:47:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b4b7dad3d7b2319f041669f8dc7bc16a5a61bb4d65a9447f415be98d2baf2a25"}
{"level":"info","ts":"2026-07-17T21:47:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/61cdb47370e56ec3949ba776f4a5ad74d4fe62b8960e88b83784e745d987b559"}
{"level":"info","ts":"2026-07-17T21:47:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/afa5e03a08ac66021a3faf4649bbbc94c6e513885160f9390f98c5c694c54ea0"}
{"level":"info","ts":"2026-07-17T21:47:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5f1fe9d7b85f744bf503bd03d83fa6c51849e72bca706593158ca53c9a29ab3f"}
{"level":"info","ts":"2026-07-17T21:47:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ceae0171777da519e60cf690cd0e52fb831a2df4a49182eee9e4a58330621022"}
{"level":"info","ts":"2026-07-17T21:47:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8e3165ad7cb679a28f9345f734b543e0b7261316994db56d2fd21c8382900fa8"}
{"level":"info","ts":"2026-07-17T21:47:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1a9f30e7baac25f9e0d4d470c9d8c91643a32fb328c8316e049ce450bb087b89"}
{"level":"info","ts":"2026-07-17T21:47:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c5a1128931acbe1ce1d32820049d769ceddbadeaf5a7a54f723f4d57850dfada"}
{"level":"info","ts":"2026-07-17T21:47:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/33477d86cd40a9277b6736abf04e33fe4b7a8ed2eff9eed548e76f13f7cc4026"}
{"level":"info","ts":"2026-07-17T21:47:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8dfbe1c30f09335203e5facf0dcc06ebe82c41e9eccfb309d27ef2356e470567"}
{"level":"info","ts":"2026-07-17T21:47:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c0f0e29cfe8f6415bf916284df30cf9d8f63413faf8fae46903d96bc626ef0a8"}
{"level":"info","ts":"2026-07-17T21:47:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6f17ea4bf0231e8b0a69243860ed148c78a85bfbb4e5ffbc132b6a7ca2fa7036"}
{"level":"info","ts":"2026-07-17T21:47:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9be2c5c7e5e526b54207c1c4ba28571877f9549427acacf7a40f0c8a73d683bd"}
{"level":"info","ts":"2026-07-17T21:47:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/99706c9f87da58a6b6aaef5f2ccf408779155bc2c1601c700ccafe865fa1fc00"}
{"level":"info","ts":"2026-07-17T21:47:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/578da6a5defaa914e7d1e0b9897b2a94342b3d2a4d32cc4397aa7732a5a40f95"}
{"level":"info","ts":"2026-07-17T21:47:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d7003c461bdc8d8abf2f59468d6b8a4e7730ee411390ea6cb777ccd57c1d297b"}
{"level":"info","ts":"2026-07-17T21:47:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cd8dcc0d61af372e76ddf720f638e5c1c50569593dade1eabe77c8e8074fc03f"}
{"level":"info","ts":"2026-07-17T21:47:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/52578a6cac0101a3e66521d797403e84cfa423c724379229503db10f53cb31cd"}
{"level":"info","ts":"2026-07-17T21:47:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5656d90b453370eacf3adb7afcff2d448b8c6f30fbf7b9c1b6bf49f0010a51b1"}
{"level":"info","ts":"2026-07-17T21:47:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/153bb5928d4fbf25691584e71c75326fb6aa0a46c02c24cbe2658f29a8ce9cf8"}