--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"debug","ts":"2026-07-14T11:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0bd71d993fd5d2df39713bfd2dce36a096ed8950487aa22b8d5b858a64e3798","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0bd71d993fd5d2df39713bfd2dce36a096ed8950487aa22b8d5b858a64e3798"}
{"level":"info","ts":"2026-07-14T11:45:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/89569c44093d052fc66fcb7ee22056ee241f545e6d8aaf6fdff536351b036849"}
{"level":"info","ts":"2026-07-14T11:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4ea6c7e1059ed5da9819940df6713f228f3a1c98da1b564c28b4ed5f75564348"}
{"level":"info","ts":"2026-07-14T11:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/51fc383c91a08c745c569fac344aff0099afbfdeee7d3f0b7120ba0893eec4ee"}
{"level":"info","ts":"2026-07-14T11:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/808989eb730559c2ef03859800c0155feaf1cca9bbc7200aa77c36bbd1a0b7dd"}
{"level":"info","ts":"2026-07-14T11:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c0bd71d993fd5d2df39713bfd2dce36a096ed8950487aa22b8d5b858a64e3798"}
{"level":"info","ts":"2026-07-14T11:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c019a85f4dc384d5cf5822d582ba8cc358face54eff6f4ba5b61dd8d598e4421"}
{"level":"info","ts":"2026-07-14T11:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b5ea78bf103fe4a2b117877229493e0701049dacd9f977ca685438a6ce0a0685"}
{"level":"info","ts":"2026-07-14T11:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/043625881fda75f8f0414ae3fef013994f0a8fb003a1ebe59d23b10f4d1305c3"}
{"level":"debug","ts":"2026-07-14T11:47:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d308ea6f182373125f1f87d79ab4fb2c62745b1d19eca518cfdb27b9ffff852","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:47:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:47:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:47:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d308ea6f182373125f1f87d79ab4fb2c62745b1d19eca518cfdb27b9ffff852","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d308ea6f182373125f1f87d79ab4fb2c62745b1d19eca518cfdb27b9ffff852","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d308ea6f182373125f1f87d79ab4fb2c62745b1d19eca518cfdb27b9ffff852","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:47:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d308ea6f182373125f1f87d79ab4fb2c62745b1d19eca518cfdb27b9ffff852"}
{"level":"debug","ts":"2026-07-14T11:47:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d308ea6f182373125f1f87d79ab4fb2c62745b1d19eca518cfdb27b9ffff852","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:47:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d308ea6f182373125f1f87d79ab4fb2c62745b1d19eca518cfdb27b9ffff852"}
{"level":"debug","ts":"2026-07-14T11:47:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d308ea6f182373125f1f87d79ab4fb2c62745b1d19eca518cfdb27b9ffff852","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:47:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:47:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d308ea6f182373125f1f87d79ab4fb2c62745b1d19eca518cfdb27b9ffff852"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:47:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d308ea6f182373125f1f87d79ab4fb2c62745b1d19eca518cfdb27b9ffff852","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4736333e32ea8157787d9d9aafefb26a8777c6d1873f2a847219000543cb69fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:47:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:47:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4736333e32ea8157787d9d9aafefb26a8777c6d1873f2a847219000543cb69fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d308ea6f182373125f1f87d79ab4fb2c62745b1d19eca518cfdb27b9ffff852","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4736333e32ea8157787d9d9aafefb26a8777c6d1873f2a847219000543cb69fb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4736333e32ea8157787d9d9aafefb26a8777c6d1873f2a847219000543cb69fb"}
{"level":"debug","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4736333e32ea8157787d9d9aafefb26a8777c6d1873f2a847219000543cb69fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:47:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:47:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4736333e32ea8157787d9d9aafefb26a8777c6d1873f2a847219000543cb69fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4736333e32ea8157787d9d9aafefb26a8777c6d1873f2a847219000543cb69fb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d308ea6f182373125f1f87d79ab4fb2c62745b1d19eca518cfdb27b9ffff852"}
{"level":"debug","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4736333e32ea8157787d9d9aafefb26a8777c6d1873f2a847219000543cb69fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:47:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:47:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4736333e32ea8157787d9d9aafefb26a8777c6d1873f2a847219000543cb69fb"}
{"level":"info","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4736333e32ea8157787d9d9aafefb26a8777c6d1873f2a847219000543cb69fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4736333e32ea8157787d9d9aafefb26a8777c6d1873f2a847219000543cb69fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4736333e32ea8157787d9d9aafefb26a8777c6d1873f2a847219000543cb69fb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4736333e32ea8157787d9d9aafefb26a8777c6d1873f2a847219000543cb69fb"}
{"level":"debug","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4736333e32ea8157787d9d9aafefb26a8777c6d1873f2a847219000543cb69fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd7f1fbc6933dffa0777c81a23ccd7797b727b4788b727485f292e0511d03653","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:47:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:47:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4736333e32ea8157787d9d9aafefb26a8777c6d1873f2a847219000543cb69fb"}
{"level":"info","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd7f1fbc6933dffa0777c81a23ccd7797b727b4788b727485f292e0511d03653","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4736333e32ea8157787d9d9aafefb26a8777c6d1873f2a847219000543cb69fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:47:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:47:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4736333e32ea8157787d9d9aafefb26a8777c6d1873f2a847219000543cb69fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd7f1fbc6933dffa0777c81a23ccd7797b727b4788b727485f292e0511d03653"}
{"level":"info","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4736333e32ea8157787d9d9aafefb26a8777c6d1873f2a847219000543cb69fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd7f1fbc6933dffa0777c81a23ccd7797b727b4788b727485f292e0511d03653","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:47:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:47:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd7f1fbc6933dffa0777c81a23ccd7797b727b4788b727485f292e0511d03653"}
{"level":"info","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd7f1fbc6933dffa0777c81a23ccd7797b727b4788b727485f292e0511d03653","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4736333e32ea8157787d9d9aafefb26a8777c6d1873f2a847219000543cb69fb"}
{"level":"debug","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4736333e32ea8157787d9d9aafefb26a8777c6d1873f2a847219000543cb69fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd7f1fbc6933dffa0777c81a23ccd7797b727b4788b727485f292e0511d03653","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd7f1fbc6933dffa0777c81a23ccd7797b727b4788b727485f292e0511d03653","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eef02fb2fa34371a19cddf1bfc0c1c80a39baf8cfc191dd7f6ce8250f6d57df1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:47:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:47:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd7f1fbc6933dffa0777c81a23ccd7797b727b4788b727485f292e0511d03653"}
{"level":"info","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eef02fb2fa34371a19cddf1bfc0c1c80a39baf8cfc191dd7f6ce8250f6d57df1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eef02fb2fa34371a19cddf1bfc0c1c80a39baf8cfc191dd7f6ce8250f6d57df1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:47:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:47:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eef02fb2fa34371a19cddf1bfc0c1c80a39baf8cfc191dd7f6ce8250f6d57df1"}
{"level":"info","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eef02fb2fa34371a19cddf1bfc0c1c80a39baf8cfc191dd7f6ce8250f6d57df1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd7f1fbc6933dffa0777c81a23ccd7797b727b4788b727485f292e0511d03653","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:47:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:47:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd7f1fbc6933dffa0777c81a23ccd7797b727b4788b727485f292e0511d03653"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd7f1fbc6933dffa0777c81a23ccd7797b727b4788b727485f292e0511d03653","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eef02fb2fa34371a19cddf1bfc0c1c80a39baf8cfc191dd7f6ce8250f6d57df1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd7f1fbc6933dffa0777c81a23ccd7797b727b4788b727485f292e0511d03653","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eef02fb2fa34371a19cddf1bfc0c1c80a39baf8cfc191dd7f6ce8250f6d57df1"}
{"level":"debug","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eef02fb2fa34371a19cddf1bfc0c1c80a39baf8cfc191dd7f6ce8250f6d57df1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:47:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:47:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eef02fb2fa34371a19cddf1bfc0c1c80a39baf8cfc191dd7f6ce8250f6d57df1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd7f1fbc6933dffa0777c81a23ccd7797b727b4788b727485f292e0511d03653"}
{"level":"info","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eef02fb2fa34371a19cddf1bfc0c1c80a39baf8cfc191dd7f6ce8250f6d57df1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eef02fb2fa34371a19cddf1bfc0c1c80a39baf8cfc191dd7f6ce8250f6d57df1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:47:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:47:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eef02fb2fa34371a19cddf1bfc0c1c80a39baf8cfc191dd7f6ce8250f6d57df1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eef02fb2fa34371a19cddf1bfc0c1c80a39baf8cfc191dd7f6ce8250f6d57df1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eef02fb2fa34371a19cddf1bfc0c1c80a39baf8cfc191dd7f6ce8250f6d57df1"}
{"level":"debug","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eef02fb2fa34371a19cddf1bfc0c1c80a39baf8cfc191dd7f6ce8250f6d57df1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eef02fb2fa34371a19cddf1bfc0c1c80a39baf8cfc191dd7f6ce8250f6d57df1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eef02fb2fa34371a19cddf1bfc0c1c80a39baf8cfc191dd7f6ce8250f6d57df1"}
{"level":"debug","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eef02fb2fa34371a19cddf1bfc0c1c80a39baf8cfc191dd7f6ce8250f6d57df1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:47:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:47:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eef02fb2fa34371a19cddf1bfc0c1c80a39baf8cfc191dd7f6ce8250f6d57df1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eef02fb2fa34371a19cddf1bfc0c1c80a39baf8cfc191dd7f6ce8250f6d57df1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ff00153df7f2780e08f9433abf712a9e0ec1d2791f3808a60779a2499e903f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:47:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:47:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ff00153df7f2780e08f9433abf712a9e0ec1d2791f3808a60779a2499e903f3"}
{"level":"info","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ff00153df7f2780e08f9433abf712a9e0ec1d2791f3808a60779a2499e903f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eef02fb2fa34371a19cddf1bfc0c1c80a39baf8cfc191dd7f6ce8250f6d57df1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:47:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:47:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eef02fb2fa34371a19cddf1bfc0c1c80a39baf8cfc191dd7f6ce8250f6d57df1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8421ac2fa170eec0066c2e54713838990328432eca47b68c39250d155eb2155","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:47:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:47:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eef02fb2fa34371a19cddf1bfc0c1c80a39baf8cfc191dd7f6ce8250f6d57df1"}
{"level":"info","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8421ac2fa170eec0066c2e54713838990328432eca47b68c39250d155eb2155","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ff00153df7f2780e08f9433abf712a9e0ec1d2791f3808a60779a2499e903f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:47:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:47:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ff00153df7f2780e08f9433abf712a9e0ec1d2791f3808a60779a2499e903f3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ff00153df7f2780e08f9433abf712a9e0ec1d2791f3808a60779a2499e903f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eef02fb2fa34371a19cddf1bfc0c1c80a39baf8cfc191dd7f6ce8250f6d57df1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:47:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:47:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eef02fb2fa34371a19cddf1bfc0c1c80a39baf8cfc191dd7f6ce8250f6d57df1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8421ac2fa170eec0066c2e54713838990328432eca47b68c39250d155eb2155"}
{"level":"info","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eef02fb2fa34371a19cddf1bfc0c1c80a39baf8cfc191dd7f6ce8250f6d57df1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8421ac2fa170eec0066c2e54713838990328432eca47b68c39250d155eb2155","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:47:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:47:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e8421ac2fa170eec0066c2e54713838990328432eca47b68c39250d155eb2155"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8421ac2fa170eec0066c2e54713838990328432eca47b68c39250d155eb2155","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ff00153df7f2780e08f9433abf712a9e0ec1d2791f3808a60779a2499e903f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:47:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:47:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ff00153df7f2780e08f9433abf712a9e0ec1d2791f3808a60779a2499e903f3"}
{"level":"info","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ff00153df7f2780e08f9433abf712a9e0ec1d2791f3808a60779a2499e903f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eef02fb2fa34371a19cddf1bfc0c1c80a39baf8cfc191dd7f6ce8250f6d57df1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:47:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:47:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eef02fb2fa34371a19cddf1bfc0c1c80a39baf8cfc191dd7f6ce8250f6d57df1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8421ac2fa170eec0066c2e54713838990328432eca47b68c39250d155eb2155","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ff00153df7f2780e08f9433abf712a9e0ec1d2791f3808a60779a2499e903f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:47:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:47:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ff00153df7f2780e08f9433abf712a9e0ec1d2791f3808a60779a2499e903f3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eef02fb2fa34371a19cddf1bfc0c1c80a39baf8cfc191dd7f6ce8250f6d57df1"}
{"level":"info","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ff00153df7f2780e08f9433abf712a9e0ec1d2791f3808a60779a2499e903f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eef02fb2fa34371a19cddf1bfc0c1c80a39baf8cfc191dd7f6ce8250f6d57df1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:47:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:47:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eef02fb2fa34371a19cddf1bfc0c1c80a39baf8cfc191dd7f6ce8250f6d57df1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eef02fb2fa34371a19cddf1bfc0c1c80a39baf8cfc191dd7f6ce8250f6d57df1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ff00153df7f2780e08f9433abf712a9e0ec1d2791f3808a60779a2499e903f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eef02fb2fa34371a19cddf1bfc0c1c80a39baf8cfc191dd7f6ce8250f6d57df1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8421ac2fa170eec0066c2e54713838990328432eca47b68c39250d155eb2155"}
{"level":"info","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ff00153df7f2780e08f9433abf712a9e0ec1d2791f3808a60779a2499e903f3"}
{"level":"debug","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57952fba15d8cdede66a22cc156511daf3161e21cfa80c5f020c41d5f0d95175","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:47:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:47:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57952fba15d8cdede66a22cc156511daf3161e21cfa80c5f020c41d5f0d95175","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57952fba15d8cdede66a22cc156511daf3161e21cfa80c5f020c41d5f0d95175","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"efb4ebcce6c00e5be50b30fa7eaca3dbaeebd3187a429756f91209eea317025d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:47:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:47:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eef02fb2fa34371a19cddf1bfc0c1c80a39baf8cfc191dd7f6ce8250f6d57df1"}
{"level":"info","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"efb4ebcce6c00e5be50b30fa7eaca3dbaeebd3187a429756f91209eea317025d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57952fba15d8cdede66a22cc156511daf3161e21cfa80c5f020c41d5f0d95175","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:47:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:47:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57952fba15d8cdede66a22cc156511daf3161e21cfa80c5f020c41d5f0d95175","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"efb4ebcce6c00e5be50b30fa7eaca3dbaeebd3187a429756f91209eea317025d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57952fba15d8cdede66a22cc156511daf3161e21cfa80c5f020c41d5f0d95175","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57952fba15d8cdede66a22cc156511daf3161e21cfa80c5f020c41d5f0d95175"}
{"level":"debug","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"efb4ebcce6c00e5be50b30fa7eaca3dbaeebd3187a429756f91209eea317025d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:47:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:47:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"efb4ebcce6c00e5be50b30fa7eaca3dbaeebd3187a429756f91209eea317025d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57952fba15d8cdede66a22cc156511daf3161e21cfa80c5f020c41d5f0d95175","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:47:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:47:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57952fba15d8cdede66a22cc156511daf3161e21cfa80c5f020c41d5f0d95175"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efb4ebcce6c00e5be50b30fa7eaca3dbaeebd3187a429756f91209eea317025d"}
{"level":"info","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57952fba15d8cdede66a22cc156511daf3161e21cfa80c5f020c41d5f0d95175","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"efb4ebcce6c00e5be50b30fa7eaca3dbaeebd3187a429756f91209eea317025d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:47:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:47:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["efb4ebcce6c00e5be50b30fa7eaca3dbaeebd3187a429756f91209eea317025d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"efb4ebcce6c00e5be50b30fa7eaca3dbaeebd3187a429756f91209eea317025d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57952fba15d8cdede66a22cc156511daf3161e21cfa80c5f020c41d5f0d95175","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:47:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:47:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57952fba15d8cdede66a22cc156511daf3161e21cfa80c5f020c41d5f0d95175"}
{"level":"info","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57952fba15d8cdede66a22cc156511daf3161e21cfa80c5f020c41d5f0d95175","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f9fcf8454940199a1722a45a60282e9cdcafcc36b884effbd4bd408a898af74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:47:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:47:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f9fcf8454940199a1722a45a60282e9cdcafcc36b884effbd4bd408a898af74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"efb4ebcce6c00e5be50b30fa7eaca3dbaeebd3187a429756f91209eea317025d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:47:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:47:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efb4ebcce6c00e5be50b30fa7eaca3dbaeebd3187a429756f91209eea317025d"}
{"level":"info","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"efb4ebcce6c00e5be50b30fa7eaca3dbaeebd3187a429756f91209eea317025d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41f9811b8a13731e2dc30e554840f6bf771749e01587093fc09367fb66bce994","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:47:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:47:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f9fcf8454940199a1722a45a60282e9cdcafcc36b884effbd4bd408a898af74"}
{"level":"info","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41f9811b8a13731e2dc30e554840f6bf771749e01587093fc09367fb66bce994","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57952fba15d8cdede66a22cc156511daf3161e21cfa80c5f020c41d5f0d95175","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f9fcf8454940199a1722a45a60282e9cdcafcc36b884effbd4bd408a898af74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:47:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:47:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f9fcf8454940199a1722a45a60282e9cdcafcc36b884effbd4bd408a898af74"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f9fcf8454940199a1722a45a60282e9cdcafcc36b884effbd4bd408a898af74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"efb4ebcce6c00e5be50b30fa7eaca3dbaeebd3187a429756f91209eea317025d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:47:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:47:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["efb4ebcce6c00e5be50b30fa7eaca3dbaeebd3187a429756f91209eea317025d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"efb4ebcce6c00e5be50b30fa7eaca3dbaeebd3187a429756f91209eea317025d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41f9811b8a13731e2dc30e554840f6bf771749e01587093fc09367fb66bce994","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57952fba15d8cdede66a22cc156511daf3161e21cfa80c5f020c41d5f0d95175","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f9fcf8454940199a1722a45a60282e9cdcafcc36b884effbd4bd408a898af74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"efb4ebcce6c00e5be50b30fa7eaca3dbaeebd3187a429756f91209eea317025d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57952fba15d8cdede66a22cc156511daf3161e21cfa80c5f020c41d5f0d95175"}
{"level":"debug","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41f9811b8a13731e2dc30e554840f6bf771749e01587093fc09367fb66bce994","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:47:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:47:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41f9811b8a13731e2dc30e554840f6bf771749e01587093fc09367fb66bce994","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19b43df9c68f60991967b560ca6cfe731d58d94681ec83f796d609ad6ec9765f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:47:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:47:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19b43df9c68f60991967b560ca6cfe731d58d94681ec83f796d609ad6ec9765f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57952fba15d8cdede66a22cc156511daf3161e21cfa80c5f020c41d5f0d95175","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:47:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:47:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57952fba15d8cdede66a22cc156511daf3161e21cfa80c5f020c41d5f0d95175"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41f9811b8a13731e2dc30e554840f6bf771749e01587093fc09367fb66bce994"}
{"level":"info","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57952fba15d8cdede66a22cc156511daf3161e21cfa80c5f020c41d5f0d95175","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a27d1d63efc64e6122f0ac768b963ef32deab29f2d259feff75bdc2aa775f34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:47:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:47:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a27d1d63efc64e6122f0ac768b963ef32deab29f2d259feff75bdc2aa775f34","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41f9811b8a13731e2dc30e554840f6bf771749e01587093fc09367fb66bce994","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:47:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:47:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["41f9811b8a13731e2dc30e554840f6bf771749e01587093fc09367fb66bce994"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41f9811b8a13731e2dc30e554840f6bf771749e01587093fc09367fb66bce994","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19b43df9c68f60991967b560ca6cfe731d58d94681ec83f796d609ad6ec9765f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57952fba15d8cdede66a22cc156511daf3161e21cfa80c5f020c41d5f0d95175","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a27d1d63efc64e6122f0ac768b963ef32deab29f2d259feff75bdc2aa775f34","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41f9811b8a13731e2dc30e554840f6bf771749e01587093fc09367fb66bce994","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19b43df9c68f60991967b560ca6cfe731d58d94681ec83f796d609ad6ec9765f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a27d1d63efc64e6122f0ac768b963ef32deab29f2d259feff75bdc2aa775f34","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efb4ebcce6c00e5be50b30fa7eaca3dbaeebd3187a429756f91209eea317025d"}
{"level":"debug","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19b43df9c68f60991967b560ca6cfe731d58d94681ec83f796d609ad6ec9765f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a27d1d63efc64e6122f0ac768b963ef32deab29f2d259feff75bdc2aa775f34","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f9fcf8454940199a1722a45a60282e9cdcafcc36b884effbd4bd408a898af74"}
{"level":"info","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19b43df9c68f60991967b560ca6cfe731d58d94681ec83f796d609ad6ec9765f"}
{"level":"info","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a27d1d63efc64e6122f0ac768b963ef32deab29f2d259feff75bdc2aa775f34"}
{"level":"debug","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19b43df9c68f60991967b560ca6cfe731d58d94681ec83f796d609ad6ec9765f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:47:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:47:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["19b43df9c68f60991967b560ca6cfe731d58d94681ec83f796d609ad6ec9765f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19b43df9c68f60991967b560ca6cfe731d58d94681ec83f796d609ad6ec9765f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a27d1d63efc64e6122f0ac768b963ef32deab29f2d259feff75bdc2aa775f34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:47:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:47:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8a27d1d63efc64e6122f0ac768b963ef32deab29f2d259feff75bdc2aa775f34"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41f9811b8a13731e2dc30e554840f6bf771749e01587093fc09367fb66bce994"}
{"level":"info","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a27d1d63efc64e6122f0ac768b963ef32deab29f2d259feff75bdc2aa775f34","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19b43df9c68f60991967b560ca6cfe731d58d94681ec83f796d609ad6ec9765f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a27d1d63efc64e6122f0ac768b963ef32deab29f2d259feff75bdc2aa775f34","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:47:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57952fba15d8cdede66a22cc156511daf3161e21cfa80c5f020c41d5f0d95175"}
{"level":"info","ts":"2026-07-14T11:47:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19b43df9c68f60991967b560ca6cfe731d58d94681ec83f796d609ad6ec9765f"}
{"level":"info","ts":"2026-07-14T11:47:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a27d1d63efc64e6122f0ac768b963ef32deab29f2d259feff75bdc2aa775f34"}
{"level":"debug","ts":"2026-07-14T11:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ebcf52bf1e0caeb7fbca1d852a6095a62a3a3ec47eec5363779aa5754e42aee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:47:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:47:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ebcf52bf1e0caeb7fbca1d852a6095a62a3a3ec47eec5363779aa5754e42aee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ebcf52bf1e0caeb7fbca1d852a6095a62a3a3ec47eec5363779aa5754e42aee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ebcf52bf1e0caeb7fbca1d852a6095a62a3a3ec47eec5363779aa5754e42aee"}
{"level":"debug","ts":"2026-07-14T11:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ebcf52bf1e0caeb7fbca1d852a6095a62a3a3ec47eec5363779aa5754e42aee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ebcf52bf1e0caeb7fbca1d852a6095a62a3a3ec47eec5363779aa5754e42aee"}
{"level":"debug","ts":"2026-07-14T11:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ebcf52bf1e0caeb7fbca1d852a6095a62a3a3ec47eec5363779aa5754e42aee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:47:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:47:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ebcf52bf1e0caeb7fbca1d852a6095a62a3a3ec47eec5363779aa5754e42aee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ebcf52bf1e0caeb7fbca1d852a6095a62a3a3ec47eec5363779aa5754e42aee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ebcf52bf1e0caeb7fbca1d852a6095a62a3a3ec47eec5363779aa5754e42aee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:47:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:47:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ebcf52bf1e0caeb7fbca1d852a6095a62a3a3ec47eec5363779aa5754e42aee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ebcf52bf1e0caeb7fbca1d852a6095a62a3a3ec47eec5363779aa5754e42aee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ebcf52bf1e0caeb7fbca1d852a6095a62a3a3ec47eec5363779aa5754e42aee"}
{"level":"debug","ts":"2026-07-14T11:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ebcf52bf1e0caeb7fbca1d852a6095a62a3a3ec47eec5363779aa5754e42aee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ebcf52bf1e0caeb7fbca1d852a6095a62a3a3ec47eec5363779aa5754e42aee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ebcf52bf1e0caeb7fbca1d852a6095a62a3a3ec47eec5363779aa5754e42aee"}
{"level":"debug","ts":"2026-07-14T11:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ebcf52bf1e0caeb7fbca1d852a6095a62a3a3ec47eec5363779aa5754e42aee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:47:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:47:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ebcf52bf1e0caeb7fbca1d852a6095a62a3a3ec47eec5363779aa5754e42aee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ebcf52bf1e0caeb7fbca1d852a6095a62a3a3ec47eec5363779aa5754e42aee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ebcf52bf1e0caeb7fbca1d852a6095a62a3a3ec47eec5363779aa5754e42aee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ebcf52bf1e0caeb7fbca1d852a6095a62a3a3ec47eec5363779aa5754e42aee"}
{"level":"debug","ts":"2026-07-14T11:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4f9b21ecc3058c8117e95be7cd29a476c993cfe8b4db4c768ec719699d5aaa1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:47:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:47:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4f9b21ecc3058c8117e95be7cd29a476c993cfe8b4db4c768ec719699d5aaa1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4f9b21ecc3058c8117e95be7cd29a476c993cfe8b4db4c768ec719699d5aaa1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:47:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:47:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4f9b21ecc3058c8117e95be7cd29a476c993cfe8b4db4c768ec719699d5aaa1"}
{"level":"info","ts":"2026-07-14T11:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4f9b21ecc3058c8117e95be7cd29a476c993cfe8b4db4c768ec719699d5aaa1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4f9b21ecc3058c8117e95be7cd29a476c993cfe8b4db4c768ec719699d5aaa1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:47:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:47:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-14T11:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e4f9b21ecc3058c8117e95be7cd29a476c993cfe8b4db4c768ec719699d5aaa1","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e4f9b21ecc3058c8117e95be7cd29a476c993cfe8b4db4c768ec719699d5aaa1\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T11:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4f9b21ecc3058c8117e95be7cd29a476c993cfe8b4db4c768ec719699d5aaa1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4f9b21ecc3058c8117e95be7cd29a476c993cfe8b4db4c768ec719699d5aaa1"}
{"level":"debug","ts":"2026-07-14T11:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4f9b21ecc3058c8117e95be7cd29a476c993cfe8b4db4c768ec719699d5aaa1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4f9b21ecc3058c8117e95be7cd29a476c993cfe8b4db4c768ec719699d5aaa1"}
{"level":"debug","ts":"2026-07-14T11:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04825ee066c04f3379e78cb4b43b42bbff110156899b6d5f89c6ef5921474e44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:47:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:47:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04825ee066c04f3379e78cb4b43b42bbff110156899b6d5f89c6ef5921474e44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04825ee066c04f3379e78cb4b43b42bbff110156899b6d5f89c6ef5921474e44","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04825ee066c04f3379e78cb4b43b42bbff110156899b6d5f89c6ef5921474e44"}
{"level":"debug","ts":"2026-07-14T11:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4f9b21ecc3058c8117e95be7cd29a476c993cfe8b4db4c768ec719699d5aaa1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:47:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:47:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4f9b21ecc3058c8117e95be7cd29a476c993cfe8b4db4c768ec719699d5aaa1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04825ee066c04f3379e78cb4b43b42bbff110156899b6d5f89c6ef5921474e44"}
{"level":"info","ts":"2026-07-14T11:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4f9b21ecc3058c8117e95be7cd29a476c993cfe8b4db4c768ec719699d5aaa1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04825ee066c04f3379e78cb4b43b42bbff110156899b6d5f89c6ef5921474e44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:47:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:47:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04825ee066c04f3379e78cb4b43b42bbff110156899b6d5f89c6ef5921474e44"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04825ee066c04f3379e78cb4b43b42bbff110156899b6d5f89c6ef5921474e44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4f9b21ecc3058c8117e95be7cd29a476c993cfe8b4db4c768ec719699d5aaa1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:47:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:47:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4f9b21ecc3058c8117e95be7cd29a476c993cfe8b4db4c768ec719699d5aaa1"}
{"level":"info","ts":"2026-07-14T11:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4f9b21ecc3058c8117e95be7cd29a476c993cfe8b4db4c768ec719699d5aaa1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04825ee066c04f3379e78cb4b43b42bbff110156899b6d5f89c6ef5921474e44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:47:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:47:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04825ee066c04f3379e78cb4b43b42bbff110156899b6d5f89c6ef5921474e44"}
{"level":"info","ts":"2026-07-14T11:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04825ee066c04f3379e78cb4b43b42bbff110156899b6d5f89c6ef5921474e44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4f9b21ecc3058c8117e95be7cd29a476c993cfe8b4db4c768ec719699d5aaa1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04825ee066c04f3379e78cb4b43b42bbff110156899b6d5f89c6ef5921474e44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:47:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:47:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04825ee066c04f3379e78cb4b43b42bbff110156899b6d5f89c6ef5921474e44"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4f9b21ecc3058c8117e95be7cd29a476c993cfe8b4db4c768ec719699d5aaa1"}
{"level":"info","ts":"2026-07-14T11:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04825ee066c04f3379e78cb4b43b42bbff110156899b6d5f89c6ef5921474e44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4f9b21ecc3058c8117e95be7cd29a476c993cfe8b4db4c768ec719699d5aaa1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:47:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:47:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4f9b21ecc3058c8117e95be7cd29a476c993cfe8b4db4c768ec719699d5aaa1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04825ee066c04f3379e78cb4b43b42bbff110156899b6d5f89c6ef5921474e44"}
{"level":"info","ts":"2026-07-14T11:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4f9b21ecc3058c8117e95be7cd29a476c993cfe8b4db4c768ec719699d5aaa1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6006b050b364ba23c7ae828f0ae2a97b0e1addaaba7d942b05c9bdb1eb64ef8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:47:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:47:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6006b050b364ba23c7ae828f0ae2a97b0e1addaaba7d942b05c9bdb1eb64ef8"}
{"level":"info","ts":"2026-07-14T11:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6006b050b364ba23c7ae828f0ae2a97b0e1addaaba7d942b05c9bdb1eb64ef8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04825ee066c04f3379e78cb4b43b42bbff110156899b6d5f89c6ef5921474e44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:47:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:47:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04825ee066c04f3379e78cb4b43b42bbff110156899b6d5f89c6ef5921474e44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4f9b21ecc3058c8117e95be7cd29a476c993cfe8b4db4c768ec719699d5aaa1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6006b050b364ba23c7ae828f0ae2a97b0e1addaaba7d942b05c9bdb1eb64ef8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:47:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:47:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6006b050b364ba23c7ae828f0ae2a97b0e1addaaba7d942b05c9bdb1eb64ef8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04825ee066c04f3379e78cb4b43b42bbff110156899b6d5f89c6ef5921474e44"}
{"level":"info","ts":"2026-07-14T11:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6006b050b364ba23c7ae828f0ae2a97b0e1addaaba7d942b05c9bdb1eb64ef8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04825ee066c04f3379e78cb4b43b42bbff110156899b6d5f89c6ef5921474e44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:47:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:47:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04825ee066c04f3379e78cb4b43b42bbff110156899b6d5f89c6ef5921474e44"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4f9b21ecc3058c8117e95be7cd29a476c993cfe8b4db4c768ec719699d5aaa1"}
{"level":"info","ts":"2026-07-14T11:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04825ee066c04f3379e78cb4b43b42bbff110156899b6d5f89c6ef5921474e44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6006b050b364ba23c7ae828f0ae2a97b0e1addaaba7d942b05c9bdb1eb64ef8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:47:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:47:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6006b050b364ba23c7ae828f0ae2a97b0e1addaaba7d942b05c9bdb1eb64ef8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04825ee066c04f3379e78cb4b43b42bbff110156899b6d5f89c6ef5921474e44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6006b050b364ba23c7ae828f0ae2a97b0e1addaaba7d942b05c9bdb1eb64ef8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6006b050b364ba23c7ae828f0ae2a97b0e1addaaba7d942b05c9bdb1eb64ef8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6006b050b364ba23c7ae828f0ae2a97b0e1addaaba7d942b05c9bdb1eb64ef8"}
{"level":"debug","ts":"2026-07-14T11:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6006b050b364ba23c7ae828f0ae2a97b0e1addaaba7d942b05c9bdb1eb64ef8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:47:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:47:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6006b050b364ba23c7ae828f0ae2a97b0e1addaaba7d942b05c9bdb1eb64ef8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04825ee066c04f3379e78cb4b43b42bbff110156899b6d5f89c6ef5921474e44"}
{"level":"info","ts":"2026-07-14T11:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6006b050b364ba23c7ae828f0ae2a97b0e1addaaba7d942b05c9bdb1eb64ef8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6006b050b364ba23c7ae828f0ae2a97b0e1addaaba7d942b05c9bdb1eb64ef8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:47:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:47:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6006b050b364ba23c7ae828f0ae2a97b0e1addaaba7d942b05c9bdb1eb64ef8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6006b050b364ba23c7ae828f0ae2a97b0e1addaaba7d942b05c9bdb1eb64ef8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6006b050b364ba23c7ae828f0ae2a97b0e1addaaba7d942b05c9bdb1eb64ef8"}
{"level":"debug","ts":"2026-07-14T11:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6006b050b364ba23c7ae828f0ae2a97b0e1addaaba7d942b05c9bdb1eb64ef8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92589f3339f4317299a2771f0b64c34408c714d2ad5b1d951056fcb5c9f223ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:47:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:47:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92589f3339f4317299a2771f0b64c34408c714d2ad5b1d951056fcb5c9f223ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6006b050b364ba23c7ae828f0ae2a97b0e1addaaba7d942b05c9bdb1eb64ef8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92589f3339f4317299a2771f0b64c34408c714d2ad5b1d951056fcb5c9f223ef","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6006b050b364ba23c7ae828f0ae2a97b0e1addaaba7d942b05c9bdb1eb64ef8"}
{"level":"debug","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92589f3339f4317299a2771f0b64c34408c714d2ad5b1d951056fcb5c9f223ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:47:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:47:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92589f3339f4317299a2771f0b64c34408c714d2ad5b1d951056fcb5c9f223ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92589f3339f4317299a2771f0b64c34408c714d2ad5b1d951056fcb5c9f223ef","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92589f3339f4317299a2771f0b64c34408c714d2ad5b1d951056fcb5c9f223ef"}
{"level":"debug","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6006b050b364ba23c7ae828f0ae2a97b0e1addaaba7d942b05c9bdb1eb64ef8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:47:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:47:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6006b050b364ba23c7ae828f0ae2a97b0e1addaaba7d942b05c9bdb1eb64ef8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6006b050b364ba23c7ae828f0ae2a97b0e1addaaba7d942b05c9bdb1eb64ef8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92589f3339f4317299a2771f0b64c34408c714d2ad5b1d951056fcb5c9f223ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6006b050b364ba23c7ae828f0ae2a97b0e1addaaba7d942b05c9bdb1eb64ef8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92589f3339f4317299a2771f0b64c34408c714d2ad5b1d951056fcb5c9f223ef"}
{"level":"info","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6006b050b364ba23c7ae828f0ae2a97b0e1addaaba7d942b05c9bdb1eb64ef8"}
{"level":"debug","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8153fccbc606b2a9e92d0051558fb7577ea3d4046460f5b174b38e9c70fdf4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:47:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:47:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8153fccbc606b2a9e92d0051558fb7577ea3d4046460f5b174b38e9c70fdf4c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8153fccbc606b2a9e92d0051558fb7577ea3d4046460f5b174b38e9c70fdf4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:47:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:47:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8153fccbc606b2a9e92d0051558fb7577ea3d4046460f5b174b38e9c70fdf4c"}
{"level":"info","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8153fccbc606b2a9e92d0051558fb7577ea3d4046460f5b174b38e9c70fdf4c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8153fccbc606b2a9e92d0051558fb7577ea3d4046460f5b174b38e9c70fdf4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:47:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:47:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b8153fccbc606b2a9e92d0051558fb7577ea3d4046460f5b174b38e9c70fdf4c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b8153fccbc606b2a9e92d0051558fb7577ea3d4046460f5b174b38e9c70fdf4c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8153fccbc606b2a9e92d0051558fb7577ea3d4046460f5b174b38e9c70fdf4c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8153fccbc606b2a9e92d0051558fb7577ea3d4046460f5b174b38e9c70fdf4c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92589f3339f4317299a2771f0b64c34408c714d2ad5b1d951056fcb5c9f223ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:47:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:47:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["92589f3339f4317299a2771f0b64c34408c714d2ad5b1d951056fcb5c9f223ef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8153fccbc606b2a9e92d0051558fb7577ea3d4046460f5b174b38e9c70fdf4c"}
{"level":"info","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92589f3339f4317299a2771f0b64c34408c714d2ad5b1d951056fcb5c9f223ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92589f3339f4317299a2771f0b64c34408c714d2ad5b1d951056fcb5c9f223ef","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8153fccbc606b2a9e92d0051558fb7577ea3d4046460f5b174b38e9c70fdf4c"}
{"level":"debug","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd7ea4d701d4e25db0264932949b154442b1e66def9a019b18ea500d8ecf1b1b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:47:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:47:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92589f3339f4317299a2771f0b64c34408c714d2ad5b1d951056fcb5c9f223ef"}
{"level":"info","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd7ea4d701d4e25db0264932949b154442b1e66def9a019b18ea500d8ecf1b1b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd7ea4d701d4e25db0264932949b154442b1e66def9a019b18ea500d8ecf1b1b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:47:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:47:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd7ea4d701d4e25db0264932949b154442b1e66def9a019b18ea500d8ecf1b1b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8153fccbc606b2a9e92d0051558fb7577ea3d4046460f5b174b38e9c70fdf4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:47:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:47:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b8153fccbc606b2a9e92d0051558fb7577ea3d4046460f5b174b38e9c70fdf4c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd7ea4d701d4e25db0264932949b154442b1e66def9a019b18ea500d8ecf1b1b"}
{"level":"info","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8153fccbc606b2a9e92d0051558fb7577ea3d4046460f5b174b38e9c70fdf4c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd7ea4d701d4e25db0264932949b154442b1e66def9a019b18ea500d8ecf1b1b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8153fccbc606b2a9e92d0051558fb7577ea3d4046460f5b174b38e9c70fdf4c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd7ea4d701d4e25db0264932949b154442b1e66def9a019b18ea500d8ecf1b1b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd7ea4d701d4e25db0264932949b154442b1e66def9a019b18ea500d8ecf1b1b"}
{"level":"debug","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd7ea4d701d4e25db0264932949b154442b1e66def9a019b18ea500d8ecf1b1b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:47:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:47:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd7ea4d701d4e25db0264932949b154442b1e66def9a019b18ea500d8ecf1b1b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8153fccbc606b2a9e92d0051558fb7577ea3d4046460f5b174b38e9c70fdf4c"}
{"level":"info","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd7ea4d701d4e25db0264932949b154442b1e66def9a019b18ea500d8ecf1b1b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd7ea4d701d4e25db0264932949b154442b1e66def9a019b18ea500d8ecf1b1b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:47:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:47:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd7ea4d701d4e25db0264932949b154442b1e66def9a019b18ea500d8ecf1b1b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd7ea4d701d4e25db0264932949b154442b1e66def9a019b18ea500d8ecf1b1b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd7ea4d701d4e25db0264932949b154442b1e66def9a019b18ea500d8ecf1b1b"}
{"level":"debug","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd7ea4d701d4e25db0264932949b154442b1e66def9a019b18ea500d8ecf1b1b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd7ea4d701d4e25db0264932949b154442b1e66def9a019b18ea500d8ecf1b1b"}
{"level":"debug","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd7ea4d701d4e25db0264932949b154442b1e66def9a019b18ea500d8ecf1b1b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:47:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:47:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd7ea4d701d4e25db0264932949b154442b1e66def9a019b18ea500d8ecf1b1b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd7ea4d701d4e25db0264932949b154442b1e66def9a019b18ea500d8ecf1b1b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd7ea4d701d4e25db0264932949b154442b1e66def9a019b18ea500d8ecf1b1b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:47:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:47:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd7ea4d701d4e25db0264932949b154442b1e66def9a019b18ea500d8ecf1b1b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd7ea4d701d4e25db0264932949b154442b1e66def9a019b18ea500d8ecf1b1b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd7ea4d701d4e25db0264932949b154442b1e66def9a019b18ea500d8ecf1b1b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd7ea4d701d4e25db0264932949b154442b1e66def9a019b18ea500d8ecf1b1b"}
{"level":"debug","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd7ea4d701d4e25db0264932949b154442b1e66def9a019b18ea500d8ecf1b1b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd7ea4d701d4e25db0264932949b154442b1e66def9a019b18ea500d8ecf1b1b"}
{"level":"debug","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd7ea4d701d4e25db0264932949b154442b1e66def9a019b18ea500d8ecf1b1b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:47:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:47:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd7ea4d701d4e25db0264932949b154442b1e66def9a019b18ea500d8ecf1b1b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd7ea4d701d4e25db0264932949b154442b1e66def9a019b18ea500d8ecf1b1b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd7ea4d701d4e25db0264932949b154442b1e66def9a019b18ea500d8ecf1b1b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:47:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:47:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd7ea4d701d4e25db0264932949b154442b1e66def9a019b18ea500d8ecf1b1b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3afbc371d992e4a6376512354ce348b924af7d451012e83a1f2585a1f5857652","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:47:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:47:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd7ea4d701d4e25db0264932949b154442b1e66def9a019b18ea500d8ecf1b1b"}
{"level":"info","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3afbc371d992e4a6376512354ce348b924af7d451012e83a1f2585a1f5857652","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd7ea4d701d4e25db0264932949b154442b1e66def9a019b18ea500d8ecf1b1b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:47:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:47:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd7ea4d701d4e25db0264932949b154442b1e66def9a019b18ea500d8ecf1b1b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3afbc371d992e4a6376512354ce348b924af7d451012e83a1f2585a1f5857652"}
{"level":"info","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd7ea4d701d4e25db0264932949b154442b1e66def9a019b18ea500d8ecf1b1b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3afbc371d992e4a6376512354ce348b924af7d451012e83a1f2585a1f5857652","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:47:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:47:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3afbc371d992e4a6376512354ce348b924af7d451012e83a1f2585a1f5857652"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3afbc371d992e4a6376512354ce348b924af7d451012e83a1f2585a1f5857652","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd7ea4d701d4e25db0264932949b154442b1e66def9a019b18ea500d8ecf1b1b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:47:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:47:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd7ea4d701d4e25db0264932949b154442b1e66def9a019b18ea500d8ecf1b1b"}
{"level":"info","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd7ea4d701d4e25db0264932949b154442b1e66def9a019b18ea500d8ecf1b1b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3afbc371d992e4a6376512354ce348b924af7d451012e83a1f2585a1f5857652","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:47:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:47:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3afbc371d992e4a6376512354ce348b924af7d451012e83a1f2585a1f5857652"}
{"level":"info","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3afbc371d992e4a6376512354ce348b924af7d451012e83a1f2585a1f5857652","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd7ea4d701d4e25db0264932949b154442b1e66def9a019b18ea500d8ecf1b1b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3afbc371d992e4a6376512354ce348b924af7d451012e83a1f2585a1f5857652","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:47:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:47:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3afbc371d992e4a6376512354ce348b924af7d451012e83a1f2585a1f5857652"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd7ea4d701d4e25db0264932949b154442b1e66def9a019b18ea500d8ecf1b1b"}
{"level":"info","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3afbc371d992e4a6376512354ce348b924af7d451012e83a1f2585a1f5857652","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60a4c8a0691d778e3dadaf853c50a3dd7eb7ee53c247feaf36a6e99a5a8b9aa1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:47:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:47:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60a4c8a0691d778e3dadaf853c50a3dd7eb7ee53c247feaf36a6e99a5a8b9aa1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd7ea4d701d4e25db0264932949b154442b1e66def9a019b18ea500d8ecf1b1b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:47:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:47:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd7ea4d701d4e25db0264932949b154442b1e66def9a019b18ea500d8ecf1b1b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3afbc371d992e4a6376512354ce348b924af7d451012e83a1f2585a1f5857652"}
{"level":"info","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd7ea4d701d4e25db0264932949b154442b1e66def9a019b18ea500d8ecf1b1b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3afbc371d992e4a6376512354ce348b924af7d451012e83a1f2585a1f5857652","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e09e8fc76b0fd2cb20d1a8dd506bea309952d6e2499bfacc28f37bf64bc74e5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:47:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:47:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60a4c8a0691d778e3dadaf853c50a3dd7eb7ee53c247feaf36a6e99a5a8b9aa1"}
{"level":"info","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e09e8fc76b0fd2cb20d1a8dd506bea309952d6e2499bfacc28f37bf64bc74e5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60a4c8a0691d778e3dadaf853c50a3dd7eb7ee53c247feaf36a6e99a5a8b9aa1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:47:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:47:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["60a4c8a0691d778e3dadaf853c50a3dd7eb7ee53c247feaf36a6e99a5a8b9aa1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e09e8fc76b0fd2cb20d1a8dd506bea309952d6e2499bfacc28f37bf64bc74e5a"}
{"level":"info","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60a4c8a0691d778e3dadaf853c50a3dd7eb7ee53c247feaf36a6e99a5a8b9aa1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af8c2e59c857902dcab9205756cba6779323e9728f8c046e66a334e1c319dec1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:47:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:47:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3afbc371d992e4a6376512354ce348b924af7d451012e83a1f2585a1f5857652"}
{"level":"info","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af8c2e59c857902dcab9205756cba6779323e9728f8c046e66a334e1c319dec1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd7ea4d701d4e25db0264932949b154442b1e66def9a019b18ea500d8ecf1b1b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e09e8fc76b0fd2cb20d1a8dd506bea309952d6e2499bfacc28f37bf64bc74e5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:47:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:47:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e09e8fc76b0fd2cb20d1a8dd506bea309952d6e2499bfacc28f37bf64bc74e5a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af8c2e59c857902dcab9205756cba6779323e9728f8c046e66a334e1c319dec1"}
{"level":"info","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e09e8fc76b0fd2cb20d1a8dd506bea309952d6e2499bfacc28f37bf64bc74e5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60a4c8a0691d778e3dadaf853c50a3dd7eb7ee53c247feaf36a6e99a5a8b9aa1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af8c2e59c857902dcab9205756cba6779323e9728f8c046e66a334e1c319dec1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:47:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:47:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af8c2e59c857902dcab9205756cba6779323e9728f8c046e66a334e1c319dec1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af8c2e59c857902dcab9205756cba6779323e9728f8c046e66a334e1c319dec1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cfa30d7a4a92d59d527bdc133bbde413222869e1e4ac0c70ba8e50d8918052d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:47:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:47:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd7ea4d701d4e25db0264932949b154442b1e66def9a019b18ea500d8ecf1b1b"}
{"level":"info","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cfa30d7a4a92d59d527bdc133bbde413222869e1e4ac0c70ba8e50d8918052d9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e09e8fc76b0fd2cb20d1a8dd506bea309952d6e2499bfacc28f37bf64bc74e5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:47:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:47:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e09e8fc76b0fd2cb20d1a8dd506bea309952d6e2499bfacc28f37bf64bc74e5a"}
{"level":"info","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e09e8fc76b0fd2cb20d1a8dd506bea309952d6e2499bfacc28f37bf64bc74e5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af8c2e59c857902dcab9205756cba6779323e9728f8c046e66a334e1c319dec1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cfa30d7a4a92d59d527bdc133bbde413222869e1e4ac0c70ba8e50d8918052d9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e09e8fc76b0fd2cb20d1a8dd506bea309952d6e2499bfacc28f37bf64bc74e5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:47:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:47:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e09e8fc76b0fd2cb20d1a8dd506bea309952d6e2499bfacc28f37bf64bc74e5a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60a4c8a0691d778e3dadaf853c50a3dd7eb7ee53c247feaf36a6e99a5a8b9aa1"}
{"level":"info","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e09e8fc76b0fd2cb20d1a8dd506bea309952d6e2499bfacc28f37bf64bc74e5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cfa30d7a4a92d59d527bdc133bbde413222869e1e4ac0c70ba8e50d8918052d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:47:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:47:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cfa30d7a4a92d59d527bdc133bbde413222869e1e4ac0c70ba8e50d8918052d9"}
{"level":"info","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cfa30d7a4a92d59d527bdc133bbde413222869e1e4ac0c70ba8e50d8918052d9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e09e8fc76b0fd2cb20d1a8dd506bea309952d6e2499bfacc28f37bf64bc74e5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cfa30d7a4a92d59d527bdc133bbde413222869e1e4ac0c70ba8e50d8918052d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:47:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:47:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cfa30d7a4a92d59d527bdc133bbde413222869e1e4ac0c70ba8e50d8918052d9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af8c2e59c857902dcab9205756cba6779323e9728f8c046e66a334e1c319dec1"}
{"level":"info","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cfa30d7a4a92d59d527bdc133bbde413222869e1e4ac0c70ba8e50d8918052d9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cfa30d7a4a92d59d527bdc133bbde413222869e1e4ac0c70ba8e50d8918052d9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cfa30d7a4a92d59d527bdc133bbde413222869e1e4ac0c70ba8e50d8918052d9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e09e8fc76b0fd2cb20d1a8dd506bea309952d6e2499bfacc28f37bf64bc74e5a"}
{"level":"info","ts":"2026-07-14T11:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cfa30d7a4a92d59d527bdc133bbde413222869e1e4ac0c70ba8e50d8918052d9"}
{"level":"info","ts":"2026-07-14T11:47:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0e5ff0d3-fa03-48a2-9815-cb2ab2eb00ef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:44658","PortSpecifier":{"PortValue":44658}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0e5ff0d3-fa03-48a2-9815-cb2ab2eb00ef","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-6b8edc.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T11:47:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0e5ff0d3-fa03-48a2-9815-cb2ab2eb00ef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:44658","PortSpecifier":{"PortValue":44658}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784029660,"nanos":653890470},"http":{"id":"0e5ff0d3-fa03-48a2-9815-cb2ab2eb00ef","method":"POST","headers":{":authority":"e2e-shared-a-6b8edc.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T11:47:40Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0e5ff0d3-fa03-48a2-9815-cb2ab2eb00ef","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T11:47:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0e5ff0d3-fa03-48a2-9815-cb2ab2eb00ef","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"98097697-1e03-4f32-b7b3-64092a0d335b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=33f0dde7-3530-4b38-b243-0793ef727757"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1e1c21f43337"]}}
{"level":"debug","ts":"2026-07-14T11:47:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0e5ff0d3-fa03-48a2-9815-cb2ab2eb00ef","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1e1c21f43337"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=33f0dde7-3530-4b38-b243-0793ef727757"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"98097697-1e03-4f32-b7b3-64092a0d335b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"dd7f1fbc6933dffa0777c81a23ccd7797b727b4788b727485f292e0511d03653"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6b8edc.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T11:47:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e5ff0d3-fa03-48a2-9815-cb2ab2eb00ef","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:47:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e5ff0d3-fa03-48a2-9815-cb2ab2eb00ef","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:47:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e5ff0d3-fa03-48a2-9815-cb2ab2eb00ef","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6b8edc/auth-test-model-6b8edc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6b8edc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:47:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0e5ff0d3-fa03-48a2-9815-cb2ab2eb00ef","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T11:47:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0e5ff0d3-fa03-48a2-9815-cb2ab2eb00ef","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T11:47:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0e5ff0d3-fa03-48a2-9815-cb2ab2eb00ef","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T11:47:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0e5ff0d3-fa03-48a2-9815-cb2ab2eb00ef","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T11:47:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0e5ff0d3-fa03-48a2-9815-cb2ab2eb00ef","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T11:47:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8f312017-da5a-4519-88ae-0ee298b78ceb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:47408","PortSpecifier":{"PortValue":47408}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8f312017-da5a-4519-88ae-0ee298b78ceb","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-5c5a7d.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T11:47:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8f312017-da5a-4519-88ae-0ee298b78ceb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:47408","PortSpecifier":{"PortValue":47408}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784029660,"nanos":717518519},"http":{"id":"8f312017-da5a-4519-88ae-0ee298b78ceb","method":"POST","headers":{":authority":"e2e-shared-b-5c5a7d.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T11:47:40Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8f312017-da5a-4519-88ae-0ee298b78ceb","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T11:47:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8f312017-da5a-4519-88ae-0ee298b78ceb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"98097697-1e03-4f32-b7b3-64092a0d335b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=33f0dde7-3530-4b38-b243-0793ef727757"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1e1c21f43337"]}}
{"level":"debug","ts":"2026-07-14T11:47:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8f312017-da5a-4519-88ae-0ee298b78ceb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1e1c21f43337"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=33f0dde7-3530-4b38-b243-0793ef727757"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"98097697-1e03-4f32-b7b3-64092a0d335b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e09e8fc76b0fd2cb20d1a8dd506bea309952d6e2499bfacc28f37bf64bc74e5a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-5c5a7d.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T11:47:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f312017-da5a-4519-88ae-0ee298b78ceb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:47:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f312017-da5a-4519-88ae-0ee298b78ceb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:47:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f312017-da5a-4519-88ae-0ee298b78ceb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-5c5a7d/auth-test-model-5c5a7d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-5c5a7d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:47:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8f312017-da5a-4519-88ae-0ee298b78ceb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T11:47:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f312017-da5a-4519-88ae-0ee298b78ceb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T11:47:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f312017-da5a-4519-88ae-0ee298b78ceb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T11:47:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8f312017-da5a-4519-88ae-0ee298b78ceb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T11:47:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8f312017-da5a-4519-88ae-0ee298b78ceb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T11:47:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f7d57cbb-04d1-4682-bd7e-e1f9a660b261","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:44668","PortSpecifier":{"PortValue":44668}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f7d57cbb-04d1-4682-bd7e-e1f9a660b261","method":"GET","path":"/maas-api/v1/api-keys/d41fcdd5-0620-4ae5-b5c7-deb3097515b3","host":"e2e-shared-a-6b8edc.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T11:47:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f7d57cbb-04d1-4682-bd7e-e1f9a660b261","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:44668","PortSpecifier":{"PortValue":44668}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784029660,"nanos":775507867},"http":{"id":"f7d57cbb-04d1-4682-bd7e-e1f9a660b261","method":"GET","headers":{":authority":"e2e-shared-a-6b8edc.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/d41fcdd5-0620-4ae5-b5c7-deb3097515b3",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T11:47:40Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f7d57cbb-04d1-4682-bd7e-e1f9a660b261","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T11:47:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f7d57cbb-04d1-4682-bd7e-e1f9a660b261","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"98097697-1e03-4f32-b7b3-64092a0d335b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=33f0dde7-3530-4b38-b243-0793ef727757"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1e1c21f43337"]}}
{"level":"debug","ts":"2026-07-14T11:47:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f7d57cbb-04d1-4682-bd7e-e1f9a660b261","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1e1c21f43337"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=33f0dde7-3530-4b38-b243-0793ef727757"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"98097697-1e03-4f32-b7b3-64092a0d335b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"dd7f1fbc6933dffa0777c81a23ccd7797b727b4788b727485f292e0511d03653"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6b8edc.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/d41fcdd5-0620-4ae5-b5c7-deb3097515b3",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T11:47:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7d57cbb-04d1-4682-bd7e-e1f9a660b261","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:47:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7d57cbb-04d1-4682-bd7e-e1f9a660b261","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:47:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7d57cbb-04d1-4682-bd7e-e1f9a660b261","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6b8edc/auth-test-model-6b8edc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6b8edc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:47:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f7d57cbb-04d1-4682-bd7e-e1f9a660b261","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T11:47:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f7d57cbb-04d1-4682-bd7e-e1f9a660b261","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T11:47:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f7d57cbb-04d1-4682-bd7e-e1f9a660b261","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T11:47:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f7d57cbb-04d1-4682-bd7e-e1f9a660b261","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T11:47:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f7d57cbb-04d1-4682-bd7e-e1f9a660b261","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T11:47:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"609ec14f-6984-40f7-96c5-e9d869f455f0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:47420","PortSpecifier":{"PortValue":47420}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"609ec14f-6984-40f7-96c5-e9d869f455f0","method":"GET","path":"/maas-api/v1/api-keys/a4baefd3-df89-4b86-bcbb-7a5558b7cc7f","host":"e2e-shared-b-5c5a7d.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T11:47:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"609ec14f-6984-40f7-96c5-e9d869f455f0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:47420","PortSpecifier":{"PortValue":47420}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784029660,"nanos":812609716},"http":{"id":"609ec14f-6984-40f7-96c5-e9d869f455f0","method":"GET","headers":{":authority":"e2e-shared-b-5c5a7d.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/a4baefd3-df89-4b86-bcbb-7a5558b7cc7f",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T11:47:40Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"609ec14f-6984-40f7-96c5-e9d869f455f0","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T11:47:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"609ec14f-6984-40f7-96c5-e9d869f455f0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"98097697-1e03-4f32-b7b3-64092a0d335b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=33f0dde7-3530-4b38-b243-0793ef727757"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1e1c21f43337"]}}
{"level":"debug","ts":"2026-07-14T11:47:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"609ec14f-6984-40f7-96c5-e9d869f455f0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1e1c21f43337"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=33f0dde7-3530-4b38-b243-0793ef727757"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"98097697-1e03-4f32-b7b3-64092a0d335b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e09e8fc76b0fd2cb20d1a8dd506bea309952d6e2499bfacc28f37bf64bc74e5a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-5c5a7d.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/a4baefd3-df89-4b86-bcbb-7a5558b7cc7f",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T11:47:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"609ec14f-6984-40f7-96c5-e9d869f455f0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:47:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"609ec14f-6984-40f7-96c5-e9d869f455f0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:47:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"609ec14f-6984-40f7-96c5-e9d869f455f0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-5c5a7d/auth-test-model-5c5a7d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-5c5a7d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:47:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"609ec14f-6984-40f7-96c5-e9d869f455f0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T11:47:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"609ec14f-6984-40f7-96c5-e9d869f455f0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T11:47:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"609ec14f-6984-40f7-96c5-e9d869f455f0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T11:47:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"609ec14f-6984-40f7-96c5-e9d869f455f0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T11:47:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"609ec14f-6984-40f7-96c5-e9d869f455f0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T11:47:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9c8a4721-d84e-42ef-aab6-0c9693e0b64e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:52686","PortSpecifier":{"PortValue":52686}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9c8a4721-d84e-42ef-aab6-0c9693e0b64e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-6b8edc.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T11:47:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9c8a4721-d84e-42ef-aab6-0c9693e0b64e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:52686","PortSpecifier":{"PortValue":52686}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784029678,"nanos":202443470},"http":{"id":"9c8a4721-d84e-42ef-aab6-0c9693e0b64e","method":"POST","headers":{":authority":"e2e-shared-a-6b8edc.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T11:47:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9c8a4721-d84e-42ef-aab6-0c9693e0b64e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T11:47:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9c8a4721-d84e-42ef-aab6-0c9693e0b64e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"98097697-1e03-4f32-b7b3-64092a0d335b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=33f0dde7-3530-4b38-b243-0793ef727757"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1e1c21f43337"]}}
{"level":"debug","ts":"2026-07-14T11:47:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9c8a4721-d84e-42ef-aab6-0c9693e0b64e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1e1c21f43337"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=33f0dde7-3530-4b38-b243-0793ef727757"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"98097697-1e03-4f32-b7b3-64092a0d335b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"dd7f1fbc6933dffa0777c81a23ccd7797b727b4788b727485f292e0511d03653"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6b8edc.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T11:47:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9c8a4721-d84e-42ef-aab6-0c9693e0b64e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:47:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9c8a4721-d84e-42ef-aab6-0c9693e0b64e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:47:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9c8a4721-d84e-42ef-aab6-0c9693e0b64e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6b8edc/auth-test-model-6b8edc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6b8edc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:47:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9c8a4721-d84e-42ef-aab6-0c9693e0b64e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T11:47:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9c8a4721-d84e-42ef-aab6-0c9693e0b64e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T11:47:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9c8a4721-d84e-42ef-aab6-0c9693e0b64e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T11:47:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9c8a4721-d84e-42ef-aab6-0c9693e0b64e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T11:47:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9c8a4721-d84e-42ef-aab6-0c9693e0b64e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T11:47:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d8a40efd-d714-4736-9689-b63913275601","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:41346","PortSpecifier":{"PortValue":41346}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d8a40efd-d714-4736-9689-b63913275601","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-5c5a7d.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T11:47:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d8a40efd-d714-4736-9689-b63913275601","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:41346","PortSpecifier":{"PortValue":41346}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784029678,"nanos":244575548},"http":{"id":"d8a40efd-d714-4736-9689-b63913275601","method":"POST","headers":{":authority":"e2e-shared-b-5c5a7d.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T11:47:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d8a40efd-d714-4736-9689-b63913275601","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T11:47:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d8a40efd-d714-4736-9689-b63913275601","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"98097697-1e03-4f32-b7b3-64092a0d335b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=33f0dde7-3530-4b38-b243-0793ef727757"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1e1c21f43337"]}}
{"level":"debug","ts":"2026-07-14T11:47:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d8a40efd-d714-4736-9689-b63913275601","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1e1c21f43337"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=33f0dde7-3530-4b38-b243-0793ef727757"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"98097697-1e03-4f32-b7b3-64092a0d335b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e09e8fc76b0fd2cb20d1a8dd506bea309952d6e2499bfacc28f37bf64bc74e5a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-5c5a7d.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T11:47:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d8a40efd-d714-4736-9689-b63913275601","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:47:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d8a40efd-d714-4736-9689-b63913275601","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:47:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d8a40efd-d714-4736-9689-b63913275601","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-5c5a7d/auth-test-model-5c5a7d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-5c5a7d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:47:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d8a40efd-d714-4736-9689-b63913275601","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T11:47:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d8a40efd-d714-4736-9689-b63913275601","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T11:47:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d8a40efd-d714-4736-9689-b63913275601","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T11:47:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d8a40efd-d714-4736-9689-b63913275601","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T11:47:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d8a40efd-d714-4736-9689-b63913275601","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T11:47:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f3213563-050e-49ad-a69b-ec8e1f6c7b70","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:52702","PortSpecifier":{"PortValue":52702}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f3213563-050e-49ad-a69b-ec8e1f6c7b70","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-6b8edc.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T11:47:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f3213563-050e-49ad-a69b-ec8e1f6c7b70","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:52702","PortSpecifier":{"PortValue":52702}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784029678,"nanos":279793108},"http":{"id":"f3213563-050e-49ad-a69b-ec8e1f6c7b70","method":"GET","headers":{":authority":"e2e-shared-a-6b8edc.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T11:47:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f3213563-050e-49ad-a69b-ec8e1f6c7b70","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-18Fi3Qykm3qStjp1R_au108RoarjlGlBVy7q65LtdO8jNt22I3Nbxr0cQtl0f"}
{"level":"debug","ts":"2026-07-14T11:47:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f3213563-050e-49ad-a69b-ec8e1f6c7b70","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6b8edc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-18Fi3Qykm3qStjp1R_au108RoarjlGlBVy7q65LtdO8jNt22I3Nbxr0cQtl0f\"}"}
{"level":"debug","ts":"2026-07-14T11:47:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f3213563-050e-49ad-a69b-ec8e1f6c7b70","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6b8edc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3a83c3e4-da13-427f-ad0a-e7ee26c46055","keyName":"e2e-auth-iso-a-616d39","subscription":"e2e-auth-iso-3cc564","tenant":"e2e-shared-a-6b8edc","userId":"3a83c3e4-da13-427f-ad0a-e7ee26c46055","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T11:47:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f3213563-050e-49ad-a69b-ec8e1f6c7b70","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T11:47:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f3213563-050e-49ad-a69b-ec8e1f6c7b70","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:47:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f3213563-050e-49ad-a69b-ec8e1f6c7b70","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:47:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f3213563-050e-49ad-a69b-ec8e1f6c7b70","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6b8edc/auth-test-model-6b8edc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6b8edc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:47:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f3213563-050e-49ad-a69b-ec8e1f6c7b70","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T11:47:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f3213563-050e-49ad-a69b-ec8e1f6c7b70","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-14T11:47:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f3213563-050e-49ad-a69b-ec8e1f6c7b70","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-3cc564"}
{"level":"debug","ts":"2026-07-14T11:47:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f3213563-050e-49ad-a69b-ec8e1f6c7b70","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T11:47:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f3213563-050e-49ad-a69b-ec8e1f6c7b70","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T11:47:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f3213563-050e-49ad-a69b-ec8e1f6c7b70","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T11:48:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ad153c84-a5f7-4a2d-b918-1304d410265a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:49672","PortSpecifier":{"PortValue":49672}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ad153c84-a5f7-4a2d-b918-1304d410265a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-6b8edc.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T11:48:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ad153c84-a5f7-4a2d-b918-1304d410265a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:49672","PortSpecifier":{"PortValue":49672}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784029695,"nanos":558802535},"http":{"id":"ad153c84-a5f7-4a2d-b918-1304d410265a","method":"POST","headers":{":authority":"e2e-shared-a-6b8edc.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T11:48:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ad153c84-a5f7-4a2d-b918-1304d410265a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T11:48:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ad153c84-a5f7-4a2d-b918-1304d410265a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"98097697-1e03-4f32-b7b3-64092a0d335b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=33f0dde7-3530-4b38-b243-0793ef727757"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1e1c21f43337"]}}
{"level":"debug","ts":"2026-07-14T11:48:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ad153c84-a5f7-4a2d-b918-1304d410265a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1e1c21f43337"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=33f0dde7-3530-4b38-b243-0793ef727757"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"98097697-1e03-4f32-b7b3-64092a0d335b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"dd7f1fbc6933dffa0777c81a23ccd7797b727b4788b727485f292e0511d03653"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6b8edc.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T11:48:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ad153c84-a5f7-4a2d-b918-1304d410265a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:48:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ad153c84-a5f7-4a2d-b918-1304d410265a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:48:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ad153c84-a5f7-4a2d-b918-1304d410265a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6b8edc/auth-test-model-6b8edc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6b8edc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:48:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ad153c84-a5f7-4a2d-b918-1304d410265a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T11:48:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ad153c84-a5f7-4a2d-b918-1304d410265a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T11:48:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ad153c84-a5f7-4a2d-b918-1304d410265a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T11:48:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ad153c84-a5f7-4a2d-b918-1304d410265a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T11:48:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ad153c84-a5f7-4a2d-b918-1304d410265a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T11:48:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4224f923-8014-49e0-ad78-cd50bce4c5cc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:37222","PortSpecifier":{"PortValue":37222}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4224f923-8014-49e0-ad78-cd50bce4c5cc","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-5c5a7d.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T11:48:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4224f923-8014-49e0-ad78-cd50bce4c5cc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:37222","PortSpecifier":{"PortValue":37222}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784029695,"nanos":591325388},"http":{"id":"4224f923-8014-49e0-ad78-cd50bce4c5cc","method":"POST","headers":{":authority":"e2e-shared-b-5c5a7d.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T11:48:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4224f923-8014-49e0-ad78-cd50bce4c5cc","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T11:48:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4224f923-8014-49e0-ad78-cd50bce4c5cc","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"98097697-1e03-4f32-b7b3-64092a0d335b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=33f0dde7-3530-4b38-b243-0793ef727757"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1e1c21f43337"]}}
{"level":"debug","ts":"2026-07-14T11:48:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4224f923-8014-49e0-ad78-cd50bce4c5cc","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1e1c21f43337"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=33f0dde7-3530-4b38-b243-0793ef727757"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"98097697-1e03-4f32-b7b3-64092a0d335b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e09e8fc76b0fd2cb20d1a8dd506bea309952d6e2499bfacc28f37bf64bc74e5a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-5c5a7d.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T11:48:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4224f923-8014-49e0-ad78-cd50bce4c5cc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:48:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4224f923-8014-49e0-ad78-cd50bce4c5cc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:48:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4224f923-8014-49e0-ad78-cd50bce4c5cc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-5c5a7d/auth-test-model-5c5a7d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-5c5a7d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:48:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4224f923-8014-49e0-ad78-cd50bce4c5cc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T11:48:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4224f923-8014-49e0-ad78-cd50bce4c5cc","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T11:48:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4224f923-8014-49e0-ad78-cd50bce4c5cc","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T11:48:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4224f923-8014-49e0-ad78-cd50bce4c5cc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T11:48:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4224f923-8014-49e0-ad78-cd50bce4c5cc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T11:48:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4ee2a0b4-43dc-4f44-b554-1a382a043992","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:37226","PortSpecifier":{"PortValue":37226}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4ee2a0b4-43dc-4f44-b554-1a382a043992","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-5c5a7d.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T11:48:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4ee2a0b4-43dc-4f44-b554-1a382a043992","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:37226","PortSpecifier":{"PortValue":37226}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784029695,"nanos":628836119},"http":{"id":"4ee2a0b4-43dc-4f44-b554-1a382a043992","method":"GET","headers":{":authority":"e2e-shared-b-5c5a7d.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T11:48:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4ee2a0b4-43dc-4f44-b554-1a382a043992","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-nJztHy8UJge1JYRr_CC3lO3XQzRxbA0S1npj6ykpZRMY0ALX3uT8VRPRVdlP"}
{"level":"debug","ts":"2026-07-14T11:48:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4ee2a0b4-43dc-4f44-b554-1a382a043992","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-5c5a7d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-nJztHy8UJge1JYRr_CC3lO3XQzRxbA0S1npj6ykpZRMY0ALX3uT8VRPRVdlP\"}"}
{"level":"debug","ts":"2026-07-14T11:48:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4ee2a0b4-43dc-4f44-b554-1a382a043992","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-5c5a7d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-14T11:48:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4ee2a0b4-43dc-4f44-b554-1a382a043992","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"e09e8fc76b0fd2cb20d1a8dd506bea309952d6e2499bfacc28f37bf64bc74e5a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-5c5a7d.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T11:48:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4ee2a0b4-43dc-4f44-b554-1a382a043992","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:48:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"4ee2a0b4-43dc-4f44-b554-1a382a043992","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-14T11:48:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4ee2a0b4-43dc-4f44-b554-1a382a043992","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-14T11:48:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4ee2a0b4-43dc-4f44-b554-1a382a043992","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-14T11:48:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"849bec29-e3ba-45db-bd75-6dd5ce3339d1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:35748","PortSpecifier":{"PortValue":35748}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"849bec29-e3ba-45db-bd75-6dd5ce3339d1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-6b8edc.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T11:48:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"849bec29-e3ba-45db-bd75-6dd5ce3339d1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:35748","PortSpecifier":{"PortValue":35748}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784029710,"nanos":823958229},"http":{"id":"849bec29-e3ba-45db-bd75-6dd5ce3339d1","method":"POST","headers":{":authority":"e2e-shared-a-6b8edc.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T11:48:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"849bec29-e3ba-45db-bd75-6dd5ce3339d1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T11:48:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"849bec29-e3ba-45db-bd75-6dd5ce3339d1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"98097697-1e03-4f32-b7b3-64092a0d335b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=33f0dde7-3530-4b38-b243-0793ef727757"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1e1c21f43337"]}}
{"level":"debug","ts":"2026-07-14T11:48:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"849bec29-e3ba-45db-bd75-6dd5ce3339d1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1e1c21f43337"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=33f0dde7-3530-4b38-b243-0793ef727757"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"98097697-1e03-4f32-b7b3-64092a0d335b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"dd7f1fbc6933dffa0777c81a23ccd7797b727b4788b727485f292e0511d03653"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6b8edc.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T11:48:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"849bec29-e3ba-45db-bd75-6dd5ce3339d1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:48:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"849bec29-e3ba-45db-bd75-6dd5ce3339d1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:48:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"849bec29-e3ba-45db-bd75-6dd5ce3339d1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6b8edc/auth-test-model-6b8edc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6b8edc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:48:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"849bec29-e3ba-45db-bd75-6dd5ce3339d1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T11:48:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"849bec29-e3ba-45db-bd75-6dd5ce3339d1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T11:48:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"849bec29-e3ba-45db-bd75-6dd5ce3339d1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-14T11:48:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"849bec29-e3ba-45db-bd75-6dd5ce3339d1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T11:48:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"849bec29-e3ba-45db-bd75-6dd5ce3339d1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T11:48:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d85ce484-5ebf-481d-a737-fe3293d19ae8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:35126","PortSpecifier":{"PortValue":35126}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d85ce484-5ebf-481d-a737-fe3293d19ae8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-5c5a7d.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T11:48:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d85ce484-5ebf-481d-a737-fe3293d19ae8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:35126","PortSpecifier":{"PortValue":35126}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784029710,"nanos":857112271},"http":{"id":"d85ce484-5ebf-481d-a737-fe3293d19ae8","method":"POST","headers":{":authority":"e2e-shared-b-5c5a7d.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T11:48:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d85ce484-5ebf-481d-a737-fe3293d19ae8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T11:48:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d85ce484-5ebf-481d-a737-fe3293d19ae8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"98097697-1e03-4f32-b7b3-64092a0d335b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=33f0dde7-3530-4b38-b243-0793ef727757"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1e1c21f43337"]}}
{"level":"debug","ts":"2026-07-14T11:48:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d85ce484-5ebf-481d-a737-fe3293d19ae8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1e1c21f43337"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=33f0dde7-3530-4b38-b243-0793ef727757"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"98097697-1e03-4f32-b7b3-64092a0d335b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e09e8fc76b0fd2cb20d1a8dd506bea309952d6e2499bfacc28f37bf64bc74e5a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-5c5a7d.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T11:48:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d85ce484-5ebf-481d-a737-fe3293d19ae8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:48:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d85ce484-5ebf-481d-a737-fe3293d19ae8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:48:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d85ce484-5ebf-481d-a737-fe3293d19ae8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-5c5a7d/auth-test-model-5c5a7d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-5c5a7d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:48:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d85ce484-5ebf-481d-a737-fe3293d19ae8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T11:48:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d85ce484-5ebf-481d-a737-fe3293d19ae8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T11:48:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d85ce484-5ebf-481d-a737-fe3293d19ae8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T11:48:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d85ce484-5ebf-481d-a737-fe3293d19ae8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T11:48:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d85ce484-5ebf-481d-a737-fe3293d19ae8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T11:48:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d6314755-e2ff-47bf-a3b2-946db1e7b8af","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:35754","PortSpecifier":{"PortValue":35754}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d6314755-e2ff-47bf-a3b2-946db1e7b8af","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-6b8edc.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T11:48:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d6314755-e2ff-47bf-a3b2-946db1e7b8af","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:35754","PortSpecifier":{"PortValue":35754}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784029710,"nanos":895523610},"http":{"id":"d6314755-e2ff-47bf-a3b2-946db1e7b8af","method":"POST","headers":{":authority":"e2e-shared-a-6b8edc.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T11:48:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d6314755-e2ff-47bf-a3b2-946db1e7b8af","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T11:48:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d6314755-e2ff-47bf-a3b2-946db1e7b8af","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"98097697-1e03-4f32-b7b3-64092a0d335b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=33f0dde7-3530-4b38-b243-0793ef727757"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1e1c21f43337"]}}
{"level":"debug","ts":"2026-07-14T11:48:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d6314755-e2ff-47bf-a3b2-946db1e7b8af","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1e1c21f43337"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=33f0dde7-3530-4b38-b243-0793ef727757"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"98097697-1e03-4f32-b7b3-64092a0d335b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"dd7f1fbc6933dffa0777c81a23ccd7797b727b4788b727485f292e0511d03653"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6b8edc.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T11:48:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d6314755-e2ff-47bf-a3b2-946db1e7b8af","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:48:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d6314755-e2ff-47bf-a3b2-946db1e7b8af","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:48:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d6314755-e2ff-47bf-a3b2-946db1e7b8af","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6b8edc/auth-test-model-6b8edc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6b8edc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:48:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d6314755-e2ff-47bf-a3b2-946db1e7b8af","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T11:48:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d6314755-e2ff-47bf-a3b2-946db1e7b8af","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T11:48:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d6314755-e2ff-47bf-a3b2-946db1e7b8af","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T11:48:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d6314755-e2ff-47bf-a3b2-946db1e7b8af","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T11:48:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d6314755-e2ff-47bf-a3b2-946db1e7b8af","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T11:48:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"087ba56b-65fb-4d97-9736-284cbcfda26b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:35128","PortSpecifier":{"PortValue":35128}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"087ba56b-65fb-4d97-9736-284cbcfda26b","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-5c5a7d.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T11:48:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"087ba56b-65fb-4d97-9736-284cbcfda26b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:35128","PortSpecifier":{"PortValue":35128}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784029710,"nanos":939280740},"http":{"id":"087ba56b-65fb-4d97-9736-284cbcfda26b","method":"POST","headers":{":authority":"e2e-shared-b-5c5a7d.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T11:48:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"087ba56b-65fb-4d97-9736-284cbcfda26b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T11:48:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"087ba56b-65fb-4d97-9736-284cbcfda26b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"98097697-1e03-4f32-b7b3-64092a0d335b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=33f0dde7-3530-4b38-b243-0793ef727757"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1e1c21f43337"]}}
{"level":"debug","ts":"2026-07-14T11:48:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"087ba56b-65fb-4d97-9736-284cbcfda26b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1e1c21f43337"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=33f0dde7-3530-4b38-b243-0793ef727757"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"98097697-1e03-4f32-b7b3-64092a0d335b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e09e8fc76b0fd2cb20d1a8dd506bea309952d6e2499bfacc28f37bf64bc74e5a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-5c5a7d.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T11:48:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"087ba56b-65fb-4d97-9736-284cbcfda26b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:48:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"087ba56b-65fb-4d97-9736-284cbcfda26b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:48:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"087ba56b-65fb-4d97-9736-284cbcfda26b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-5c5a7d/auth-test-model-5c5a7d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-5c5a7d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:48:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"087ba56b-65fb-4d97-9736-284cbcfda26b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T11:48:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"087ba56b-65fb-4d97-9736-284cbcfda26b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T11:48:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"087ba56b-65fb-4d97-9736-284cbcfda26b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T11:48:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"087ba56b-65fb-4d97-9736-284cbcfda26b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T11:48:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"087ba56b-65fb-4d97-9736-284cbcfda26b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T11:48:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"93bd78e3-b5f6-42f9-a742-55b2a8ffa0fd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:59292","PortSpecifier":{"PortValue":59292}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"93bd78e3-b5f6-42f9-a742-55b2a8ffa0fd","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-6b8edc.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T11:48:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"93bd78e3-b5f6-42f9-a742-55b2a8ffa0fd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:59292","PortSpecifier":{"PortValue":59292}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784029726,"nanos":235664450},"http":{"id":"93bd78e3-b5f6-42f9-a742-55b2a8ffa0fd","method":"POST","headers":{":authority":"e2e-shared-a-6b8edc.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T11:48:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"93bd78e3-b5f6-42f9-a742-55b2a8ffa0fd","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T11:48:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"93bd78e3-b5f6-42f9-a742-55b2a8ffa0fd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"98097697-1e03-4f32-b7b3-64092a0d335b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=33f0dde7-3530-4b38-b243-0793ef727757"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1e1c21f43337"]}}
{"level":"debug","ts":"2026-07-14T11:48:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"93bd78e3-b5f6-42f9-a742-55b2a8ffa0fd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1e1c21f43337"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=33f0dde7-3530-4b38-b243-0793ef727757"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"98097697-1e03-4f32-b7b3-64092a0d335b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"dd7f1fbc6933dffa0777c81a23ccd7797b727b4788b727485f292e0511d03653"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6b8edc.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T11:48:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"93bd78e3-b5f6-42f9-a742-55b2a8ffa0fd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:48:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"93bd78e3-b5f6-42f9-a742-55b2a8ffa0fd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:48:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"93bd78e3-b5f6-42f9-a742-55b2a8ffa0fd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6b8edc/auth-test-model-6b8edc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6b8edc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:48:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"93bd78e3-b5f6-42f9-a742-55b2a8ffa0fd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T11:48:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"93bd78e3-b5f6-42f9-a742-55b2a8ffa0fd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T11:48:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"93bd78e3-b5f6-42f9-a742-55b2a8ffa0fd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T11:48:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"93bd78e3-b5f6-42f9-a742-55b2a8ffa0fd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T11:48:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"93bd78e3-b5f6-42f9-a742-55b2a8ffa0fd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T11:48:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"28ab165b-979b-4616-b142-86a80d09a0a9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:44912","PortSpecifier":{"PortValue":44912}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"28ab165b-979b-4616-b142-86a80d09a0a9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-5c5a7d.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T11:48:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"28ab165b-979b-4616-b142-86a80d09a0a9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:44912","PortSpecifier":{"PortValue":44912}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784029726,"nanos":269775225},"http":{"id":"28ab165b-979b-4616-b142-86a80d09a0a9","method":"POST","headers":{":authority":"e2e-shared-b-5c5a7d.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T11:48:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"28ab165b-979b-4616-b142-86a80d09a0a9","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T11:48:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"28ab165b-979b-4616-b142-86a80d09a0a9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"98097697-1e03-4f32-b7b3-64092a0d335b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=33f0dde7-3530-4b38-b243-0793ef727757"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1e1c21f43337"]}}
{"level":"debug","ts":"2026-07-14T11:48:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"28ab165b-979b-4616-b142-86a80d09a0a9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1e1c21f43337"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=33f0dde7-3530-4b38-b243-0793ef727757"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"98097697-1e03-4f32-b7b3-64092a0d335b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e09e8fc76b0fd2cb20d1a8dd506bea309952d6e2499bfacc28f37bf64bc74e5a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-5c5a7d.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T11:48:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"28ab165b-979b-4616-b142-86a80d09a0a9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:48:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"28ab165b-979b-4616-b142-86a80d09a0a9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:48:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"28ab165b-979b-4616-b142-86a80d09a0a9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-5c5a7d/auth-test-model-5c5a7d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-5c5a7d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:48:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"28ab165b-979b-4616-b142-86a80d09a0a9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T11:48:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"28ab165b-979b-4616-b142-86a80d09a0a9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T11:48:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"28ab165b-979b-4616-b142-86a80d09a0a9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T11:48:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"28ab165b-979b-4616-b142-86a80d09a0a9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T11:48:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"28ab165b-979b-4616-b142-86a80d09a0a9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T11:48:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"923ffa40-ef42-4c54-b485-cc620fe79afd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:44926","PortSpecifier":{"PortValue":44926}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"923ffa40-ef42-4c54-b485-cc620fe79afd","method":"GET","path":"/maas-api/v1/api-keys/91bfd2ff-f382-46ff-9735-96a72971bcf3","host":"e2e-shared-b-5c5a7d.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T11:48:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"923ffa40-ef42-4c54-b485-cc620fe79afd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:44926","PortSpecifier":{"PortValue":44926}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784029726,"nanos":307818542},"http":{"id":"923ffa40-ef42-4c54-b485-cc620fe79afd","method":"GET","headers":{":authority":"e2e-shared-b-5c5a7d.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/91bfd2ff-f382-46ff-9735-96a72971bcf3",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T11:48:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"923ffa40-ef42-4c54-b485-cc620fe79afd","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T11:48:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"923ffa40-ef42-4c54-b485-cc620fe79afd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"98097697-1e03-4f32-b7b3-64092a0d335b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=33f0dde7-3530-4b38-b243-0793ef727757"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1e1c21f43337"]}}
{"level":"debug","ts":"2026-07-14T11:48:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"923ffa40-ef42-4c54-b485-cc620fe79afd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1e1c21f43337"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=33f0dde7-3530-4b38-b243-0793ef727757"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"98097697-1e03-4f32-b7b3-64092a0d335b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e09e8fc76b0fd2cb20d1a8dd506bea309952d6e2499bfacc28f37bf64bc74e5a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-5c5a7d.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/91bfd2ff-f382-46ff-9735-96a72971bcf3",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T11:48:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"923ffa40-ef42-4c54-b485-cc620fe79afd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:48:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"923ffa40-ef42-4c54-b485-cc620fe79afd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:48:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"923ffa40-ef42-4c54-b485-cc620fe79afd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-5c5a7d/auth-test-model-5c5a7d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-5c5a7d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:48:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"923ffa40-ef42-4c54-b485-cc620fe79afd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T11:48:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"923ffa40-ef42-4c54-b485-cc620fe79afd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T11:48:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"923ffa40-ef42-4c54-b485-cc620fe79afd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T11:48:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"923ffa40-ef42-4c54-b485-cc620fe79afd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T11:48:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"923ffa40-ef42-4c54-b485-cc620fe79afd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T11:48:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"62892564-2dbd-4067-9874-59455ee7c1a8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:59294","PortSpecifier":{"PortValue":59294}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"62892564-2dbd-4067-9874-59455ee7c1a8","method":"GET","path":"/maas-api/v1/api-keys/91bfd2ff-f382-46ff-9735-96a72971bcf3","host":"e2e-shared-a-6b8edc.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T11:48:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"62892564-2dbd-4067-9874-59455ee7c1a8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:59294","PortSpecifier":{"PortValue":59294}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784029726,"nanos":339462758},"http":{"id":"62892564-2dbd-4067-9874-59455ee7c1a8","method":"GET","headers":{":authority":"e2e-shared-a-6b8edc.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/91bfd2ff-f382-46ff-9735-96a72971bcf3",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T11:48:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"62892564-2dbd-4067-9874-59455ee7c1a8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T11:48:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"62892564-2dbd-4067-9874-59455ee7c1a8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"98097697-1e03-4f32-b7b3-64092a0d335b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=33f0dde7-3530-4b38-b243-0793ef727757"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1e1c21f43337"]}}
{"level":"debug","ts":"2026-07-14T11:48:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"62892564-2dbd-4067-9874-59455ee7c1a8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1e1c21f43337"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=33f0dde7-3530-4b38-b243-0793ef727757"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"98097697-1e03-4f32-b7b3-64092a0d335b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"dd7f1fbc6933dffa0777c81a23ccd7797b727b4788b727485f292e0511d03653"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6b8edc.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/91bfd2ff-f382-46ff-9735-96a72971bcf3",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T11:48:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"62892564-2dbd-4067-9874-59455ee7c1a8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:48:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"62892564-2dbd-4067-9874-59455ee7c1a8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:48:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"62892564-2dbd-4067-9874-59455ee7c1a8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6b8edc/auth-test-model-6b8edc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6b8edc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:48:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"62892564-2dbd-4067-9874-59455ee7c1a8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T11:48:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"62892564-2dbd-4067-9874-59455ee7c1a8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T11:48:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"62892564-2dbd-4067-9874-59455ee7c1a8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T11:48:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"62892564-2dbd-4067-9874-59455ee7c1a8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T11:48:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"62892564-2dbd-4067-9874-59455ee7c1a8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T11:49:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f37ff639-0e32-4e12-a61a-32c8fc99cb00","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:35536","PortSpecifier":{"PortValue":35536}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f37ff639-0e32-4e12-a61a-32c8fc99cb00","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-6b8edc.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T11:49:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f37ff639-0e32-4e12-a61a-32c8fc99cb00","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:35536","PortSpecifier":{"PortValue":35536}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784029743,"nanos":717934267},"http":{"id":"f37ff639-0e32-4e12-a61a-32c8fc99cb00","method":"POST","headers":{":authority":"e2e-shared-a-6b8edc.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T11:49:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f37ff639-0e32-4e12-a61a-32c8fc99cb00","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T11:49:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f37ff639-0e32-4e12-a61a-32c8fc99cb00","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"98097697-1e03-4f32-b7b3-64092a0d335b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=33f0dde7-3530-4b38-b243-0793ef727757"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1e1c21f43337"]}}
{"level":"debug","ts":"2026-07-14T11:49:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f37ff639-0e32-4e12-a61a-32c8fc99cb00","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1e1c21f43337"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=33f0dde7-3530-4b38-b243-0793ef727757"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"98097697-1e03-4f32-b7b3-64092a0d335b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"dd7f1fbc6933dffa0777c81a23ccd7797b727b4788b727485f292e0511d03653"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6b8edc.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T11:49:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f37ff639-0e32-4e12-a61a-32c8fc99cb00","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:49:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f37ff639-0e32-4e12-a61a-32c8fc99cb00","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:49:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f37ff639-0e32-4e12-a61a-32c8fc99cb00","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6b8edc/auth-test-model-6b8edc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6b8edc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:49:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f37ff639-0e32-4e12-a61a-32c8fc99cb00","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T11:49:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f37ff639-0e32-4e12-a61a-32c8fc99cb00","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T11:49:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f37ff639-0e32-4e12-a61a-32c8fc99cb00","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T11:49:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f37ff639-0e32-4e12-a61a-32c8fc99cb00","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T11:49:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f37ff639-0e32-4e12-a61a-32c8fc99cb00","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T11:49:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4a568ac9-e671-47ed-9c30-114aede71fc2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:46788","PortSpecifier":{"PortValue":46788}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4a568ac9-e671-47ed-9c30-114aede71fc2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-5c5a7d.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T11:49:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4a568ac9-e671-47ed-9c30-114aede71fc2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:46788","PortSpecifier":{"PortValue":46788}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784029743,"nanos":754736887},"http":{"id":"4a568ac9-e671-47ed-9c30-114aede71fc2","method":"POST","headers":{":authority":"e2e-shared-b-5c5a7d.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T11:49:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4a568ac9-e671-47ed-9c30-114aede71fc2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T11:49:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4a568ac9-e671-47ed-9c30-114aede71fc2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"98097697-1e03-4f32-b7b3-64092a0d335b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=33f0dde7-3530-4b38-b243-0793ef727757"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1e1c21f43337"]}}
{"level":"debug","ts":"2026-07-14T11:49:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4a568ac9-e671-47ed-9c30-114aede71fc2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1e1c21f43337"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=33f0dde7-3530-4b38-b243-0793ef727757"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"98097697-1e03-4f32-b7b3-64092a0d335b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e09e8fc76b0fd2cb20d1a8dd506bea309952d6e2499bfacc28f37bf64bc74e5a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-5c5a7d.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T11:49:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4a568ac9-e671-47ed-9c30-114aede71fc2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:49:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4a568ac9-e671-47ed-9c30-114aede71fc2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:49:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4a568ac9-e671-47ed-9c30-114aede71fc2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-5c5a7d/auth-test-model-5c5a7d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-5c5a7d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:49:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4a568ac9-e671-47ed-9c30-114aede71fc2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T11:49:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4a568ac9-e671-47ed-9c30-114aede71fc2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T11:49:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4a568ac9-e671-47ed-9c30-114aede71fc2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T11:49:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4a568ac9-e671-47ed-9c30-114aede71fc2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T11:49:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4a568ac9-e671-47ed-9c30-114aede71fc2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T11:49:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"facf81d8-f5af-4d38-8fa4-d579ed77c200","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:35542","PortSpecifier":{"PortValue":35542}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"facf81d8-f5af-4d38-8fa4-d579ed77c200","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-6b8edc.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T11:49:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"facf81d8-f5af-4d38-8fa4-d579ed77c200","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:35542","PortSpecifier":{"PortValue":35542}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784029743,"nanos":795043979},"http":{"id":"facf81d8-f5af-4d38-8fa4-d579ed77c200","method":"POST","headers":{":authority":"e2e-shared-a-6b8edc.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T11:49:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"facf81d8-f5af-4d38-8fa4-d579ed77c200","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-vI9KkekMx6fyh5SW_628Ltyu5Tu0AVLFQuqCFpgUjdkJJYtPffqkGFyVW8iq"}
{"level":"debug","ts":"2026-07-14T11:49:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"facf81d8-f5af-4d38-8fa4-d579ed77c200","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6b8edc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-vI9KkekMx6fyh5SW_628Ltyu5Tu0AVLFQuqCFpgUjdkJJYtPffqkGFyVW8iq\"}"}
{"level":"debug","ts":"2026-07-14T11:49:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"facf81d8-f5af-4d38-8fa4-d579ed77c200","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6b8edc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a80701ee-6ecf-4b41-96d3-10872c5a3cc9","keyName":"e2e-auth-iso-a-7436ab","subscription":"e2e-auth-iso-9f7b91","tenant":"e2e-shared-a-6b8edc","userId":"a80701ee-6ecf-4b41-96d3-10872c5a3cc9","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T11:49:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"facf81d8-f5af-4d38-8fa4-d579ed77c200","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T11:49:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"facf81d8-f5af-4d38-8fa4-d579ed77c200","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:49:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"facf81d8-f5af-4d38-8fa4-d579ed77c200","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:49:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"facf81d8-f5af-4d38-8fa4-d579ed77c200","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6b8edc/auth-test-model-6b8edc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6b8edc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:49:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"facf81d8-f5af-4d38-8fa4-d579ed77c200","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-14T11:49:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"facf81d8-f5af-4d38-8fa4-d579ed77c200","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T11:49:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"facf81d8-f5af-4d38-8fa4-d579ed77c200","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T11:49:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"facf81d8-f5af-4d38-8fa4-d579ed77c200","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-9f7b91"}
{"level":"info","ts":"2026-07-14T11:49:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"facf81d8-f5af-4d38-8fa4-d579ed77c200","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T11:49:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"facf81d8-f5af-4d38-8fa4-d579ed77c200","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T11:49:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6f9fcf8454940199a1722a45a60282e9cdcafcc36b884effbd4bd408a898af74"}
{"level":"info","ts":"2026-07-14T11:49:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a6006b050b364ba23c7ae828f0ae2a97b0e1addaaba7d942b05c9bdb1eb64ef8"}
{"level":"info","ts":"2026-07-14T11:49:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/19b43df9c68f60991967b560ca6cfe731d58d94681ec83f796d609ad6ec9765f"}
{"level":"info","ts":"2026-07-14T11:49:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/efb4ebcce6c00e5be50b30fa7eaca3dbaeebd3187a429756f91209eea317025d"}
{"level":"info","ts":"2026-07-14T11:49:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eef02fb2fa34371a19cddf1bfc0c1c80a39baf8cfc191dd7f6ce8250f6d57df1"}
{"level":"info","ts":"2026-07-14T11:49:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/57952fba15d8cdede66a22cc156511daf3161e21cfa80c5f020c41d5f0d95175"}
{"level":"info","ts":"2026-07-14T11:49:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e8421ac2fa170eec0066c2e54713838990328432eca47b68c39250d155eb2155"}
{"level":"info","ts":"2026-07-14T11:49:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3afbc371d992e4a6376512354ce348b924af7d451012e83a1f2585a1f5857652"}
{"level":"info","ts":"2026-07-14T11:49:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e4f9b21ecc3058c8117e95be7cd29a476c993cfe8b4db4c768ec719699d5aaa1"}
{"level":"info","ts":"2026-07-14T11:49:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b8153fccbc606b2a9e92d0051558fb7577ea3d4046460f5b174b38e9c70fdf4c"}
{"level":"info","ts":"2026-07-14T11:49:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/04825ee066c04f3379e78cb4b43b42bbff110156899b6d5f89c6ef5921474e44"}
{"level":"info","ts":"2026-07-14T11:49:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4736333e32ea8157787d9d9aafefb26a8777c6d1873f2a847219000543cb69fb"}
{"level":"info","ts":"2026-07-14T11:49:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cfa30d7a4a92d59d527bdc133bbde413222869e1e4ac0c70ba8e50d8918052d9"}
{"level":"info","ts":"2026-07-14T11:49:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/92589f3339f4317299a2771f0b64c34408c714d2ad5b1d951056fcb5c9f223ef"}
{"level":"info","ts":"2026-07-14T11:49:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/60a4c8a0691d778e3dadaf853c50a3dd7eb7ee53c247feaf36a6e99a5a8b9aa1"}
{"level":"info","ts":"2026-07-14T11:49:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8a27d1d63efc64e6122f0ac768b963ef32deab29f2d259feff75bdc2aa775f34"}
{"level":"debug","ts":"2026-07-14T11:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8e8f3d5dea0dffa121ed51f1940bbeb358f9b39839594b1f853d62c314e3bfb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:49:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:49:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8e8f3d5dea0dffa121ed51f1940bbeb358f9b39839594b1f853d62c314e3bfb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8e8f3d5dea0dffa121ed51f1940bbeb358f9b39839594b1f853d62c314e3bfb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8e8f3d5dea0dffa121ed51f1940bbeb358f9b39839594b1f853d62c314e3bfb"}
{"level":"debug","ts":"2026-07-14T11:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8e8f3d5dea0dffa121ed51f1940bbeb358f9b39839594b1f853d62c314e3bfb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8e8f3d5dea0dffa121ed51f1940bbeb358f9b39839594b1f853d62c314e3bfb"}
{"level":"debug","ts":"2026-07-14T11:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8e8f3d5dea0dffa121ed51f1940bbeb358f9b39839594b1f853d62c314e3bfb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:49:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:49:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a8e8f3d5dea0dffa121ed51f1940bbeb358f9b39839594b1f853d62c314e3bfb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8e8f3d5dea0dffa121ed51f1940bbeb358f9b39839594b1f853d62c314e3bfb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8e8f3d5dea0dffa121ed51f1940bbeb358f9b39839594b1f853d62c314e3bfb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8e8f3d5dea0dffa121ed51f1940bbeb358f9b39839594b1f853d62c314e3bfb"}
{"level":"debug","ts":"2026-07-14T11:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6e6ca5c7328ba71d44e74f54f437d5e88cd79bfbd0487cf13e7dabad36bb00c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:49:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:49:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6e6ca5c7328ba71d44e74f54f437d5e88cd79bfbd0487cf13e7dabad36bb00c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6e6ca5c7328ba71d44e74f54f437d5e88cd79bfbd0487cf13e7dabad36bb00c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6e6ca5c7328ba71d44e74f54f437d5e88cd79bfbd0487cf13e7dabad36bb00c"}
{"level":"debug","ts":"2026-07-14T11:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6e6ca5c7328ba71d44e74f54f437d5e88cd79bfbd0487cf13e7dabad36bb00c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:49:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:49:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f6e6ca5c7328ba71d44e74f54f437d5e88cd79bfbd0487cf13e7dabad36bb00c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6e6ca5c7328ba71d44e74f54f437d5e88cd79bfbd0487cf13e7dabad36bb00c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6e6ca5c7328ba71d44e74f54f437d5e88cd79bfbd0487cf13e7dabad36bb00c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:49:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:49:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6e6ca5c7328ba71d44e74f54f437d5e88cd79bfbd0487cf13e7dabad36bb00c"}
{"level":"info","ts":"2026-07-14T11:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6e6ca5c7328ba71d44e74f54f437d5e88cd79bfbd0487cf13e7dabad36bb00c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6e6ca5c7328ba71d44e74f54f437d5e88cd79bfbd0487cf13e7dabad36bb00c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6e6ca5c7328ba71d44e74f54f437d5e88cd79bfbd0487cf13e7dabad36bb00c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6e6ca5c7328ba71d44e74f54f437d5e88cd79bfbd0487cf13e7dabad36bb00c"}
{"level":"debug","ts":"2026-07-14T11:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6e6ca5c7328ba71d44e74f54f437d5e88cd79bfbd0487cf13e7dabad36bb00c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6e6ca5c7328ba71d44e74f54f437d5e88cd79bfbd0487cf13e7dabad36bb00c"}
{"level":"debug","ts":"2026-07-14T11:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6e6ca5c7328ba71d44e74f54f437d5e88cd79bfbd0487cf13e7dabad36bb00c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:49:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:49:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f6e6ca5c7328ba71d44e74f54f437d5e88cd79bfbd0487cf13e7dabad36bb00c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6e6ca5c7328ba71d44e74f54f437d5e88cd79bfbd0487cf13e7dabad36bb00c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6e6ca5c7328ba71d44e74f54f437d5e88cd79bfbd0487cf13e7dabad36bb00c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6e6ca5c7328ba71d44e74f54f437d5e88cd79bfbd0487cf13e7dabad36bb00c"}
{"level":"debug","ts":"2026-07-14T11:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf55d20ab8d499defbb2f5184c774018d7a68c0a8e6a155bde1c9ac8cde067f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:49:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:49:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:49:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf55d20ab8d499defbb2f5184c774018d7a68c0a8e6a155bde1c9ac8cde067f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:49:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf55d20ab8d499defbb2f5184c774018d7a68c0a8e6a155bde1c9ac8cde067f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:49:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf55d20ab8d499defbb2f5184c774018d7a68c0a8e6a155bde1c9ac8cde067f9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:49:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf55d20ab8d499defbb2f5184c774018d7a68c0a8e6a155bde1c9ac8cde067f9"}
{"level":"debug","ts":"2026-07-14T11:49:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf55d20ab8d499defbb2f5184c774018d7a68c0a8e6a155bde1c9ac8cde067f9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:49:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf55d20ab8d499defbb2f5184c774018d7a68c0a8e6a155bde1c9ac8cde067f9"}
{"level":"debug","ts":"2026-07-14T11:49:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf55d20ab8d499defbb2f5184c774018d7a68c0a8e6a155bde1c9ac8cde067f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:49:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:49:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf55d20ab8d499defbb2f5184c774018d7a68c0a8e6a155bde1c9ac8cde067f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:49:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf55d20ab8d499defbb2f5184c774018d7a68c0a8e6a155bde1c9ac8cde067f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:49:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf55d20ab8d499defbb2f5184c774018d7a68c0a8e6a155bde1c9ac8cde067f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:49:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:49:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:49:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf55d20ab8d499defbb2f5184c774018d7a68c0a8e6a155bde1c9ac8cde067f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:49:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf55d20ab8d499defbb2f5184c774018d7a68c0a8e6a155bde1c9ac8cde067f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:49:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf55d20ab8d499defbb2f5184c774018d7a68c0a8e6a155bde1c9ac8cde067f9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:49:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf55d20ab8d499defbb2f5184c774018d7a68c0a8e6a155bde1c9ac8cde067f9"}
{"level":"debug","ts":"2026-07-14T11:49:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf55d20ab8d499defbb2f5184c774018d7a68c0a8e6a155bde1c9ac8cde067f9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:49:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf55d20ab8d499defbb2f5184c774018d7a68c0a8e6a155bde1c9ac8cde067f9"}
{"level":"debug","ts":"2026-07-14T11:49:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf55d20ab8d499defbb2f5184c774018d7a68c0a8e6a155bde1c9ac8cde067f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:49:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:49:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf55d20ab8d499defbb2f5184c774018d7a68c0a8e6a155bde1c9ac8cde067f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:49:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf55d20ab8d499defbb2f5184c774018d7a68c0a8e6a155bde1c9ac8cde067f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:49:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5844f17889755e1ece8f442e133b34c4a409f46c1a36b3e1ea114a08d96abac7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:49:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:49:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:49:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5844f17889755e1ece8f442e133b34c4a409f46c1a36b3e1ea114a08d96abac7"}
{"level":"info","ts":"2026-07-14T11:49:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5844f17889755e1ece8f442e133b34c4a409f46c1a36b3e1ea114a08d96abac7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:49:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf55d20ab8d499defbb2f5184c774018d7a68c0a8e6a155bde1c9ac8cde067f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:49:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:49:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:49:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf55d20ab8d499defbb2f5184c774018d7a68c0a8e6a155bde1c9ac8cde067f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:49:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5844f17889755e1ece8f442e133b34c4a409f46c1a36b3e1ea114a08d96abac7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:49:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:49:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5844f17889755e1ece8f442e133b34c4a409f46c1a36b3e1ea114a08d96abac7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:49:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf55d20ab8d499defbb2f5184c774018d7a68c0a8e6a155bde1c9ac8cde067f9"}
{"level":"info","ts":"2026-07-14T11:49:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5844f17889755e1ece8f442e133b34c4a409f46c1a36b3e1ea114a08d96abac7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:49:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf55d20ab8d499defbb2f5184c774018d7a68c0a8e6a155bde1c9ac8cde067f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:49:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:49:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf55d20ab8d499defbb2f5184c774018d7a68c0a8e6a155bde1c9ac8cde067f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:49:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf55d20ab8d499defbb2f5184c774018d7a68c0a8e6a155bde1c9ac8cde067f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:49:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5844f17889755e1ece8f442e133b34c4a409f46c1a36b3e1ea114a08d96abac7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:49:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:49:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:49:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5844f17889755e1ece8f442e133b34c4a409f46c1a36b3e1ea114a08d96abac7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:49:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf55d20ab8d499defbb2f5184c774018d7a68c0a8e6a155bde1c9ac8cde067f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:49:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5844f17889755e1ece8f442e133b34c4a409f46c1a36b3e1ea114a08d96abac7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:49:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5844f17889755e1ece8f442e133b34c4a409f46c1a36b3e1ea114a08d96abac7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:49:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5844f17889755e1ece8f442e133b34c4a409f46c1a36b3e1ea114a08d96abac7"}
{"level":"debug","ts":"2026-07-14T11:49:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5844f17889755e1ece8f442e133b34c4a409f46c1a36b3e1ea114a08d96abac7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:49:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:49:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5844f17889755e1ece8f442e133b34c4a409f46c1a36b3e1ea114a08d96abac7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:49:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf55d20ab8d499defbb2f5184c774018d7a68c0a8e6a155bde1c9ac8cde067f9"}
{"level":"info","ts":"2026-07-14T11:49:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5844f17889755e1ece8f442e133b34c4a409f46c1a36b3e1ea114a08d96abac7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:49:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5844f17889755e1ece8f442e133b34c4a409f46c1a36b3e1ea114a08d96abac7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:49:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:49:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:49:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5844f17889755e1ece8f442e133b34c4a409f46c1a36b3e1ea114a08d96abac7"}
{"level":"info","ts":"2026-07-14T11:49:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5844f17889755e1ece8f442e133b34c4a409f46c1a36b3e1ea114a08d96abac7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:49:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5844f17889755e1ece8f442e133b34c4a409f46c1a36b3e1ea114a08d96abac7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:49:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5844f17889755e1ece8f442e133b34c4a409f46c1a36b3e1ea114a08d96abac7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:49:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5844f17889755e1ece8f442e133b34c4a409f46c1a36b3e1ea114a08d96abac7"}
{"level":"debug","ts":"2026-07-14T11:49:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5844f17889755e1ece8f442e133b34c4a409f46c1a36b3e1ea114a08d96abac7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:49:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab029f7eac088a5fb06ea537e26ba444fda12a8ddf39fb37edf46030876f08f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:49:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:49:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:49:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5844f17889755e1ece8f442e133b34c4a409f46c1a36b3e1ea114a08d96abac7"}
{"level":"info","ts":"2026-07-14T11:49:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab029f7eac088a5fb06ea537e26ba444fda12a8ddf39fb37edf46030876f08f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:49:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab029f7eac088a5fb06ea537e26ba444fda12a8ddf39fb37edf46030876f08f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:49:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:49:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:49:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab029f7eac088a5fb06ea537e26ba444fda12a8ddf39fb37edf46030876f08f7"}
{"level":"info","ts":"2026-07-14T11:49:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab029f7eac088a5fb06ea537e26ba444fda12a8ddf39fb37edf46030876f08f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:49:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5844f17889755e1ece8f442e133b34c4a409f46c1a36b3e1ea114a08d96abac7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:49:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:49:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5844f17889755e1ece8f442e133b34c4a409f46c1a36b3e1ea114a08d96abac7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:49:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab029f7eac088a5fb06ea537e26ba444fda12a8ddf39fb37edf46030876f08f7"}
{"level":"info","ts":"2026-07-14T11:49:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5844f17889755e1ece8f442e133b34c4a409f46c1a36b3e1ea114a08d96abac7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:49:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab029f7eac088a5fb06ea537e26ba444fda12a8ddf39fb37edf46030876f08f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:49:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5844f17889755e1ece8f442e133b34c4a409f46c1a36b3e1ea114a08d96abac7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:49:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab029f7eac088a5fb06ea537e26ba444fda12a8ddf39fb37edf46030876f08f7"}
{"level":"debug","ts":"2026-07-14T11:49:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab029f7eac088a5fb06ea537e26ba444fda12a8ddf39fb37edf46030876f08f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:49:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:49:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab029f7eac088a5fb06ea537e26ba444fda12a8ddf39fb37edf46030876f08f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:49:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5844f17889755e1ece8f442e133b34c4a409f46c1a36b3e1ea114a08d96abac7"}
{"level":"info","ts":"2026-07-14T11:49:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab029f7eac088a5fb06ea537e26ba444fda12a8ddf39fb37edf46030876f08f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:49:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab029f7eac088a5fb06ea537e26ba444fda12a8ddf39fb37edf46030876f08f7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:49:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab029f7eac088a5fb06ea537e26ba444fda12a8ddf39fb37edf46030876f08f7"}
{"level":"debug","ts":"2026-07-14T11:49:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8a9e669899d7685f9e992b0a039a25b79e4a8fa08510f4dbfd79e67b353a76f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:49:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:49:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:49:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8a9e669899d7685f9e992b0a039a25b79e4a8fa08510f4dbfd79e67b353a76f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:49:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8a9e669899d7685f9e992b0a039a25b79e4a8fa08510f4dbfd79e67b353a76f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:49:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8a9e669899d7685f9e992b0a039a25b79e4a8fa08510f4dbfd79e67b353a76f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:49:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8a9e669899d7685f9e992b0a039a25b79e4a8fa08510f4dbfd79e67b353a76f"}
{"level":"debug","ts":"2026-07-14T11:49:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8a9e669899d7685f9e992b0a039a25b79e4a8fa08510f4dbfd79e67b353a76f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:49:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8a9e669899d7685f9e992b0a039a25b79e4a8fa08510f4dbfd79e67b353a76f"}
{"level":"debug","ts":"2026-07-14T11:49:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8a9e669899d7685f9e992b0a039a25b79e4a8fa08510f4dbfd79e67b353a76f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:49:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:49:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a8a9e669899d7685f9e992b0a039a25b79e4a8fa08510f4dbfd79e67b353a76f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:49:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8a9e669899d7685f9e992b0a039a25b79e4a8fa08510f4dbfd79e67b353a76f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:49:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8a9e669899d7685f9e992b0a039a25b79e4a8fa08510f4dbfd79e67b353a76f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:49:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"821cab5b6da4cea066bf36217a86feb910d4ff484c5b0f8665e3b25d8532fb4f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:49:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:49:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:49:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8a9e669899d7685f9e992b0a039a25b79e4a8fa08510f4dbfd79e67b353a76f"}
{"level":"info","ts":"2026-07-14T11:49:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"821cab5b6da4cea066bf36217a86feb910d4ff484c5b0f8665e3b25d8532fb4f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:49:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"821cab5b6da4cea066bf36217a86feb910d4ff484c5b0f8665e3b25d8532fb4f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:49:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:49:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:49:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"821cab5b6da4cea066bf36217a86feb910d4ff484c5b0f8665e3b25d8532fb4f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:49:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"821cab5b6da4cea066bf36217a86feb910d4ff484c5b0f8665e3b25d8532fb4f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:49:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:49:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:49:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/821cab5b6da4cea066bf36217a86feb910d4ff484c5b0f8665e3b25d8532fb4f"}
{"level":"error","ts":"2026-07-14T11:49:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"821cab5b6da4cea066bf36217a86feb910d4ff484c5b0f8665e3b25d8532fb4f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"821cab5b6da4cea066bf36217a86feb910d4ff484c5b0f8665e3b25d8532fb4f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T11:49:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"821cab5b6da4cea066bf36217a86feb910d4ff484c5b0f8665e3b25d8532fb4f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:49:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"821cab5b6da4cea066bf36217a86feb910d4ff484c5b0f8665e3b25d8532fb4f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:49:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/821cab5b6da4cea066bf36217a86feb910d4ff484c5b0f8665e3b25d8532fb4f"}
{"level":"debug","ts":"2026-07-14T11:49:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a34acb983277b8fea458897ed99bf8633f13524c4f009657f8c9652ee72ef3a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:49:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:49:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:49:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a34acb983277b8fea458897ed99bf8633f13524c4f009657f8c9652ee72ef3a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:49:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a34acb983277b8fea458897ed99bf8633f13524c4f009657f8c9652ee72ef3a2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:49:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a34acb983277b8fea458897ed99bf8633f13524c4f009657f8c9652ee72ef3a2"}
{"level":"debug","ts":"2026-07-14T11:49:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a34acb983277b8fea458897ed99bf8633f13524c4f009657f8c9652ee72ef3a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:49:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"821cab5b6da4cea066bf36217a86feb910d4ff484c5b0f8665e3b25d8532fb4f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:49:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:49:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["821cab5b6da4cea066bf36217a86feb910d4ff484c5b0f8665e3b25d8532fb4f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:49:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"821cab5b6da4cea066bf36217a86feb910d4ff484c5b0f8665e3b25d8532fb4f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:49:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"821cab5b6da4cea066bf36217a86feb910d4ff484c5b0f8665e3b25d8532fb4f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:49:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a34acb983277b8fea458897ed99bf8633f13524c4f009657f8c9652ee72ef3a2"}
{"level":"debug","ts":"2026-07-14T11:49:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a34acb983277b8fea458897ed99bf8633f13524c4f009657f8c9652ee72ef3a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:49:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:49:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a34acb983277b8fea458897ed99bf8633f13524c4f009657f8c9652ee72ef3a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:49:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a34acb983277b8fea458897ed99bf8633f13524c4f009657f8c9652ee72ef3a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:49:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a34acb983277b8fea458897ed99bf8633f13524c4f009657f8c9652ee72ef3a2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:49:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/821cab5b6da4cea066bf36217a86feb910d4ff484c5b0f8665e3b25d8532fb4f"}
{"level":"info","ts":"2026-07-14T11:49:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a34acb983277b8fea458897ed99bf8633f13524c4f009657f8c9652ee72ef3a2"}
{"level":"debug","ts":"2026-07-14T11:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2820e93b0626cb9190cc24818b3129a8eda4fbc723cacd082f91fad7f6628e2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:50:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:50:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2820e93b0626cb9190cc24818b3129a8eda4fbc723cacd082f91fad7f6628e2a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2820e93b0626cb9190cc24818b3129a8eda4fbc723cacd082f91fad7f6628e2a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2820e93b0626cb9190cc24818b3129a8eda4fbc723cacd082f91fad7f6628e2a"}
{"level":"debug","ts":"2026-07-14T11:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2820e93b0626cb9190cc24818b3129a8eda4fbc723cacd082f91fad7f6628e2a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2820e93b0626cb9190cc24818b3129a8eda4fbc723cacd082f91fad7f6628e2a"}
{"level":"debug","ts":"2026-07-14T11:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2820e93b0626cb9190cc24818b3129a8eda4fbc723cacd082f91fad7f6628e2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:50:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:50:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2820e93b0626cb9190cc24818b3129a8eda4fbc723cacd082f91fad7f6628e2a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2820e93b0626cb9190cc24818b3129a8eda4fbc723cacd082f91fad7f6628e2a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2820e93b0626cb9190cc24818b3129a8eda4fbc723cacd082f91fad7f6628e2a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2820e93b0626cb9190cc24818b3129a8eda4fbc723cacd082f91fad7f6628e2a"}
{"level":"debug","ts":"2026-07-14T11:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1194fa06755b015ac37b062e29cec37864b855bf631d747032a312657adb33da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:50:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:50:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1194fa06755b015ac37b062e29cec37864b855bf631d747032a312657adb33da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1194fa06755b015ac37b062e29cec37864b855bf631d747032a312657adb33da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:50:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:50:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1194fa06755b015ac37b062e29cec37864b855bf631d747032a312657adb33da"}
{"level":"info","ts":"2026-07-14T11:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1194fa06755b015ac37b062e29cec37864b855bf631d747032a312657adb33da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1194fa06755b015ac37b062e29cec37864b855bf631d747032a312657adb33da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:50:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:50:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1194fa06755b015ac37b062e29cec37864b855bf631d747032a312657adb33da"}
{"level":"error","ts":"2026-07-14T11:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1194fa06755b015ac37b062e29cec37864b855bf631d747032a312657adb33da","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1194fa06755b015ac37b062e29cec37864b855bf631d747032a312657adb33da\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T11:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1194fa06755b015ac37b062e29cec37864b855bf631d747032a312657adb33da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1194fa06755b015ac37b062e29cec37864b855bf631d747032a312657adb33da","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1194fa06755b015ac37b062e29cec37864b855bf631d747032a312657adb33da"}
{"level":"debug","ts":"2026-07-14T11:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35aff3d818fa66871c7f0afa0bdc15d2c48ba11545d5018cc16ec7e9d03ddcdc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:50:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:50:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35aff3d818fa66871c7f0afa0bdc15d2c48ba11545d5018cc16ec7e9d03ddcdc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35aff3d818fa66871c7f0afa0bdc15d2c48ba11545d5018cc16ec7e9d03ddcdc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:50:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:50:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35aff3d818fa66871c7f0afa0bdc15d2c48ba11545d5018cc16ec7e9d03ddcdc"}
{"level":"info","ts":"2026-07-14T11:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35aff3d818fa66871c7f0afa0bdc15d2c48ba11545d5018cc16ec7e9d03ddcdc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1194fa06755b015ac37b062e29cec37864b855bf631d747032a312657adb33da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:50:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:50:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1194fa06755b015ac37b062e29cec37864b855bf631d747032a312657adb33da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35aff3d818fa66871c7f0afa0bdc15d2c48ba11545d5018cc16ec7e9d03ddcdc"}
{"level":"info","ts":"2026-07-14T11:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1194fa06755b015ac37b062e29cec37864b855bf631d747032a312657adb33da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35aff3d818fa66871c7f0afa0bdc15d2c48ba11545d5018cc16ec7e9d03ddcdc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1194fa06755b015ac37b062e29cec37864b855bf631d747032a312657adb33da","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35aff3d818fa66871c7f0afa0bdc15d2c48ba11545d5018cc16ec7e9d03ddcdc"}
{"level":"debug","ts":"2026-07-14T11:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35aff3d818fa66871c7f0afa0bdc15d2c48ba11545d5018cc16ec7e9d03ddcdc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:50:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:50:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35aff3d818fa66871c7f0afa0bdc15d2c48ba11545d5018cc16ec7e9d03ddcdc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1194fa06755b015ac37b062e29cec37864b855bf631d747032a312657adb33da"}
{"level":"info","ts":"2026-07-14T11:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35aff3d818fa66871c7f0afa0bdc15d2c48ba11545d5018cc16ec7e9d03ddcdc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35aff3d818fa66871c7f0afa0bdc15d2c48ba11545d5018cc16ec7e9d03ddcdc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:50:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:50:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35aff3d818fa66871c7f0afa0bdc15d2c48ba11545d5018cc16ec7e9d03ddcdc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fa4d631ea23ce33cf2f47b22fa4b349d345301dd245b451ccbbddd69b7cfd95","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:50:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:50:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35aff3d818fa66871c7f0afa0bdc15d2c48ba11545d5018cc16ec7e9d03ddcdc"}
{"level":"info","ts":"2026-07-14T11:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fa4d631ea23ce33cf2f47b22fa4b349d345301dd245b451ccbbddd69b7cfd95","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35aff3d818fa66871c7f0afa0bdc15d2c48ba11545d5018cc16ec7e9d03ddcdc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:50:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:50:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35aff3d818fa66871c7f0afa0bdc15d2c48ba11545d5018cc16ec7e9d03ddcdc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fa4d631ea23ce33cf2f47b22fa4b349d345301dd245b451ccbbddd69b7cfd95"}
{"level":"info","ts":"2026-07-14T11:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35aff3d818fa66871c7f0afa0bdc15d2c48ba11545d5018cc16ec7e9d03ddcdc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fa4d631ea23ce33cf2f47b22fa4b349d345301dd245b451ccbbddd69b7cfd95","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:50:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:50:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6fa4d631ea23ce33cf2f47b22fa4b349d345301dd245b451ccbbddd69b7cfd95"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35aff3d818fa66871c7f0afa0bdc15d2c48ba11545d5018cc16ec7e9d03ddcdc"}
{"level":"info","ts":"2026-07-14T11:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fa4d631ea23ce33cf2f47b22fa4b349d345301dd245b451ccbbddd69b7cfd95","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35aff3d818fa66871c7f0afa0bdc15d2c48ba11545d5018cc16ec7e9d03ddcdc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fa4d631ea23ce33cf2f47b22fa4b349d345301dd245b451ccbbddd69b7cfd95","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:50:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:50:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fa4d631ea23ce33cf2f47b22fa4b349d345301dd245b451ccbbddd69b7cfd95"}
{"level":"info","ts":"2026-07-14T11:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fa4d631ea23ce33cf2f47b22fa4b349d345301dd245b451ccbbddd69b7cfd95","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fa4d631ea23ce33cf2f47b22fa4b349d345301dd245b451ccbbddd69b7cfd95","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:50:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:50:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6fa4d631ea23ce33cf2f47b22fa4b349d345301dd245b451ccbbddd69b7cfd95"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35aff3d818fa66871c7f0afa0bdc15d2c48ba11545d5018cc16ec7e9d03ddcdc"}
{"level":"info","ts":"2026-07-14T11:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fa4d631ea23ce33cf2f47b22fa4b349d345301dd245b451ccbbddd69b7cfd95","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6fa4d631ea23ce33cf2f47b22fa4b349d345301dd245b451ccbbddd69b7cfd95","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f92f451cd52fff1b53c9c514688b8392538fcd7598351e7df099fbf4ad94975","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:50:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:50:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fa4d631ea23ce33cf2f47b22fa4b349d345301dd245b451ccbbddd69b7cfd95"}
{"level":"info","ts":"2026-07-14T11:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f92f451cd52fff1b53c9c514688b8392538fcd7598351e7df099fbf4ad94975"}
{"level":"info","ts":"2026-07-14T11:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f92f451cd52fff1b53c9c514688b8392538fcd7598351e7df099fbf4ad94975","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fa4d631ea23ce33cf2f47b22fa4b349d345301dd245b451ccbbddd69b7cfd95","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:50:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:50:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fa4d631ea23ce33cf2f47b22fa4b349d345301dd245b451ccbbddd69b7cfd95"}
{"level":"info","ts":"2026-07-14T11:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fa4d631ea23ce33cf2f47b22fa4b349d345301dd245b451ccbbddd69b7cfd95","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f92f451cd52fff1b53c9c514688b8392538fcd7598351e7df099fbf4ad94975","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:50:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:50:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f92f451cd52fff1b53c9c514688b8392538fcd7598351e7df099fbf4ad94975","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fa4d631ea23ce33cf2f47b22fa4b349d345301dd245b451ccbbddd69b7cfd95","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:50:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:50:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6fa4d631ea23ce33cf2f47b22fa4b349d345301dd245b451ccbbddd69b7cfd95"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f92f451cd52fff1b53c9c514688b8392538fcd7598351e7df099fbf4ad94975"}
{"level":"info","ts":"2026-07-14T11:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fa4d631ea23ce33cf2f47b22fa4b349d345301dd245b451ccbbddd69b7cfd95","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f92f451cd52fff1b53c9c514688b8392538fcd7598351e7df099fbf4ad94975","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:50:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:50:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3f92f451cd52fff1b53c9c514688b8392538fcd7598351e7df099fbf4ad94975"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f92f451cd52fff1b53c9c514688b8392538fcd7598351e7df099fbf4ad94975","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fa4d631ea23ce33cf2f47b22fa4b349d345301dd245b451ccbbddd69b7cfd95","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:50:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:50:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fa4d631ea23ce33cf2f47b22fa4b349d345301dd245b451ccbbddd69b7cfd95"}
{"level":"info","ts":"2026-07-14T11:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fa4d631ea23ce33cf2f47b22fa4b349d345301dd245b451ccbbddd69b7cfd95","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f92f451cd52fff1b53c9c514688b8392538fcd7598351e7df099fbf4ad94975","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:50:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:50:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f92f451cd52fff1b53c9c514688b8392538fcd7598351e7df099fbf4ad94975","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fa4d631ea23ce33cf2f47b22fa4b349d345301dd245b451ccbbddd69b7cfd95","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:50:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:50:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6fa4d631ea23ce33cf2f47b22fa4b349d345301dd245b451ccbbddd69b7cfd95"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f92f451cd52fff1b53c9c514688b8392538fcd7598351e7df099fbf4ad94975"}
{"level":"info","ts":"2026-07-14T11:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fa4d631ea23ce33cf2f47b22fa4b349d345301dd245b451ccbbddd69b7cfd95","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f92f451cd52fff1b53c9c514688b8392538fcd7598351e7df099fbf4ad94975","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:50:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:50:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3f92f451cd52fff1b53c9c514688b8392538fcd7598351e7df099fbf4ad94975"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fa4d631ea23ce33cf2f47b22fa4b349d345301dd245b451ccbbddd69b7cfd95"}
{"level":"info","ts":"2026-07-14T11:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f92f451cd52fff1b53c9c514688b8392538fcd7598351e7df099fbf4ad94975","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6fa4d631ea23ce33cf2f47b22fa4b349d345301dd245b451ccbbddd69b7cfd95","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a713c65ada16be0d0ae31bafc29f1e8f63cabe37bea4a24c71dd532a23893e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:50:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:50:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f92f451cd52fff1b53c9c514688b8392538fcd7598351e7df099fbf4ad94975"}
{"level":"info","ts":"2026-07-14T11:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a713c65ada16be0d0ae31bafc29f1e8f63cabe37bea4a24c71dd532a23893e3"}
{"level":"info","ts":"2026-07-14T11:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a713c65ada16be0d0ae31bafc29f1e8f63cabe37bea4a24c71dd532a23893e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f92f451cd52fff1b53c9c514688b8392538fcd7598351e7df099fbf4ad94975","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a713c65ada16be0d0ae31bafc29f1e8f63cabe37bea4a24c71dd532a23893e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:50:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:50:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a713c65ada16be0d0ae31bafc29f1e8f63cabe37bea4a24c71dd532a23893e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fa4d631ea23ce33cf2f47b22fa4b349d345301dd245b451ccbbddd69b7cfd95"}
{"level":"info","ts":"2026-07-14T11:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f92f451cd52fff1b53c9c514688b8392538fcd7598351e7df099fbf4ad94975"}
{"level":"info","ts":"2026-07-14T11:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a713c65ada16be0d0ae31bafc29f1e8f63cabe37bea4a24c71dd532a23893e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a713c65ada16be0d0ae31bafc29f1e8f63cabe37bea4a24c71dd532a23893e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:50:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:50:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a713c65ada16be0d0ae31bafc29f1e8f63cabe37bea4a24c71dd532a23893e3"}
{"level":"info","ts":"2026-07-14T11:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6858b9a768f949668f2d87dd935034e889217d5d1dc89aa049909d9b99c425c7"}
{"level":"info","ts":"2026-07-14T11:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a713c65ada16be0d0ae31bafc29f1e8f63cabe37bea4a24c71dd532a23893e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6858b9a768f949668f2d87dd935034e889217d5d1dc89aa049909d9b99c425c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:50:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:50:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6858b9a768f949668f2d87dd935034e889217d5d1dc89aa049909d9b99c425c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a713c65ada16be0d0ae31bafc29f1e8f63cabe37bea4a24c71dd532a23893e3"}
{"level":"info","ts":"2026-07-14T11:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6858b9a768f949668f2d87dd935034e889217d5d1dc89aa049909d9b99c425c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a713c65ada16be0d0ae31bafc29f1e8f63cabe37bea4a24c71dd532a23893e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:50:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:50:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a713c65ada16be0d0ae31bafc29f1e8f63cabe37bea4a24c71dd532a23893e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6858b9a768f949668f2d87dd935034e889217d5d1dc89aa049909d9b99c425c7"}
{"level":"info","ts":"2026-07-14T11:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a713c65ada16be0d0ae31bafc29f1e8f63cabe37bea4a24c71dd532a23893e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6858b9a768f949668f2d87dd935034e889217d5d1dc89aa049909d9b99c425c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a713c65ada16be0d0ae31bafc29f1e8f63cabe37bea4a24c71dd532a23893e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:50:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:50:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a713c65ada16be0d0ae31bafc29f1e8f63cabe37bea4a24c71dd532a23893e3"}
{"level":"info","ts":"2026-07-14T11:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a713c65ada16be0d0ae31bafc29f1e8f63cabe37bea4a24c71dd532a23893e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a713c65ada16be0d0ae31bafc29f1e8f63cabe37bea4a24c71dd532a23893e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:50:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:50:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a713c65ada16be0d0ae31bafc29f1e8f63cabe37bea4a24c71dd532a23893e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a713c65ada16be0d0ae31bafc29f1e8f63cabe37bea4a24c71dd532a23893e3"}
{"level":"info","ts":"2026-07-14T11:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a713c65ada16be0d0ae31bafc29f1e8f63cabe37bea4a24c71dd532a23893e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a713c65ada16be0d0ae31bafc29f1e8f63cabe37bea4a24c71dd532a23893e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:50:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:50:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a713c65ada16be0d0ae31bafc29f1e8f63cabe37bea4a24c71dd532a23893e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-14T11:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3a713c65ada16be0d0ae31bafc29f1e8f63cabe37bea4a24c71dd532a23893e3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3a713c65ada16be0d0ae31bafc29f1e8f63cabe37bea4a24c71dd532a23893e3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T11:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a713c65ada16be0d0ae31bafc29f1e8f63cabe37bea4a24c71dd532a23893e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:50:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:50:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a713c65ada16be0d0ae31bafc29f1e8f63cabe37bea4a24c71dd532a23893e3"}
{"level":"info","ts":"2026-07-14T11:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a713c65ada16be0d0ae31bafc29f1e8f63cabe37bea4a24c71dd532a23893e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a713c65ada16be0d0ae31bafc29f1e8f63cabe37bea4a24c71dd532a23893e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a713c65ada16be0d0ae31bafc29f1e8f63cabe37bea4a24c71dd532a23893e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a713c65ada16be0d0ae31bafc29f1e8f63cabe37bea4a24c71dd532a23893e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a713c65ada16be0d0ae31bafc29f1e8f63cabe37bea4a24c71dd532a23893e3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a713c65ada16be0d0ae31bafc29f1e8f63cabe37bea4a24c71dd532a23893e3"}
{"level":"debug","ts":"2026-07-14T11:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a713c65ada16be0d0ae31bafc29f1e8f63cabe37bea4a24c71dd532a23893e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:50:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:50:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a713c65ada16be0d0ae31bafc29f1e8f63cabe37bea4a24c71dd532a23893e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a713c65ada16be0d0ae31bafc29f1e8f63cabe37bea4a24c71dd532a23893e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a713c65ada16be0d0ae31bafc29f1e8f63cabe37bea4a24c71dd532a23893e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:50:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:50:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a713c65ada16be0d0ae31bafc29f1e8f63cabe37bea4a24c71dd532a23893e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a713c65ada16be0d0ae31bafc29f1e8f63cabe37bea4a24c71dd532a23893e3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a713c65ada16be0d0ae31bafc29f1e8f63cabe37bea4a24c71dd532a23893e3"}
{"level":"debug","ts":"2026-07-14T11:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a713c65ada16be0d0ae31bafc29f1e8f63cabe37bea4a24c71dd532a23893e3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a713c65ada16be0d0ae31bafc29f1e8f63cabe37bea4a24c71dd532a23893e3"}
{"level":"debug","ts":"2026-07-14T11:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a713c65ada16be0d0ae31bafc29f1e8f63cabe37bea4a24c71dd532a23893e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:50:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:50:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a713c65ada16be0d0ae31bafc29f1e8f63cabe37bea4a24c71dd532a23893e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a713c65ada16be0d0ae31bafc29f1e8f63cabe37bea4a24c71dd532a23893e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2f9bf91b582456f3910b80bac41e71045cbfb5c69031bd79d2f8641d1552491","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:50:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:50:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2f9bf91b582456f3910b80bac41e71045cbfb5c69031bd79d2f8641d1552491"}
{"level":"info","ts":"2026-07-14T11:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2f9bf91b582456f3910b80bac41e71045cbfb5c69031bd79d2f8641d1552491","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a713c65ada16be0d0ae31bafc29f1e8f63cabe37bea4a24c71dd532a23893e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:50:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:50:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a713c65ada16be0d0ae31bafc29f1e8f63cabe37bea4a24c71dd532a23893e3"}
{"level":"info","ts":"2026-07-14T11:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a713c65ada16be0d0ae31bafc29f1e8f63cabe37bea4a24c71dd532a23893e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2f9bf91b582456f3910b80bac41e71045cbfb5c69031bd79d2f8641d1552491","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a713c65ada16be0d0ae31bafc29f1e8f63cabe37bea4a24c71dd532a23893e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:50:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:50:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a713c65ada16be0d0ae31bafc29f1e8f63cabe37bea4a24c71dd532a23893e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2f9bf91b582456f3910b80bac41e71045cbfb5c69031bd79d2f8641d1552491"}
{"level":"info","ts":"2026-07-14T11:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a713c65ada16be0d0ae31bafc29f1e8f63cabe37bea4a24c71dd532a23893e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2f9bf91b582456f3910b80bac41e71045cbfb5c69031bd79d2f8641d1552491","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:50:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:50:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f2f9bf91b582456f3910b80bac41e71045cbfb5c69031bd79d2f8641d1552491"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a713c65ada16be0d0ae31bafc29f1e8f63cabe37bea4a24c71dd532a23893e3"}
{"level":"info","ts":"2026-07-14T11:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2f9bf91b582456f3910b80bac41e71045cbfb5c69031bd79d2f8641d1552491","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a713c65ada16be0d0ae31bafc29f1e8f63cabe37bea4a24c71dd532a23893e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:50:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:50:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a713c65ada16be0d0ae31bafc29f1e8f63cabe37bea4a24c71dd532a23893e3"}
{"level":"info","ts":"2026-07-14T11:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a713c65ada16be0d0ae31bafc29f1e8f63cabe37bea4a24c71dd532a23893e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2f9bf91b582456f3910b80bac41e71045cbfb5c69031bd79d2f8641d1552491","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:50:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:50:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2f9bf91b582456f3910b80bac41e71045cbfb5c69031bd79d2f8641d1552491"}
{"level":"info","ts":"2026-07-14T11:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2f9bf91b582456f3910b80bac41e71045cbfb5c69031bd79d2f8641d1552491","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a713c65ada16be0d0ae31bafc29f1e8f63cabe37bea4a24c71dd532a23893e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2f9bf91b582456f3910b80bac41e71045cbfb5c69031bd79d2f8641d1552491","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:50:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:50:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f2f9bf91b582456f3910b80bac41e71045cbfb5c69031bd79d2f8641d1552491"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a713c65ada16be0d0ae31bafc29f1e8f63cabe37bea4a24c71dd532a23893e3"}
{"level":"info","ts":"2026-07-14T11:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2f9bf91b582456f3910b80bac41e71045cbfb5c69031bd79d2f8641d1552491","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a713c65ada16be0d0ae31bafc29f1e8f63cabe37bea4a24c71dd532a23893e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:50:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:50:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a713c65ada16be0d0ae31bafc29f1e8f63cabe37bea4a24c71dd532a23893e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a713c65ada16be0d0ae31bafc29f1e8f63cabe37bea4a24c71dd532a23893e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2f9bf91b582456f3910b80bac41e71045cbfb5c69031bd79d2f8641d1552491","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:50:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:50:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2f9bf91b582456f3910b80bac41e71045cbfb5c69031bd79d2f8641d1552491"}
{"level":"info","ts":"2026-07-14T11:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2f9bf91b582456f3910b80bac41e71045cbfb5c69031bd79d2f8641d1552491","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a713c65ada16be0d0ae31bafc29f1e8f63cabe37bea4a24c71dd532a23893e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:50:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:50:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a713c65ada16be0d0ae31bafc29f1e8f63cabe37bea4a24c71dd532a23893e3"}
{"level":"info","ts":"2026-07-14T11:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a713c65ada16be0d0ae31bafc29f1e8f63cabe37bea4a24c71dd532a23893e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2f9bf91b582456f3910b80bac41e71045cbfb5c69031bd79d2f8641d1552491","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a713c65ada16be0d0ae31bafc29f1e8f63cabe37bea4a24c71dd532a23893e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:50:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:50:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a713c65ada16be0d0ae31bafc29f1e8f63cabe37bea4a24c71dd532a23893e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2f9bf91b582456f3910b80bac41e71045cbfb5c69031bd79d2f8641d1552491"}
{"level":"info","ts":"2026-07-14T11:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a713c65ada16be0d0ae31bafc29f1e8f63cabe37bea4a24c71dd532a23893e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2f9bf91b582456f3910b80bac41e71045cbfb5c69031bd79d2f8641d1552491","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:50:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:50:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f2f9bf91b582456f3910b80bac41e71045cbfb5c69031bd79d2f8641d1552491"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a713c65ada16be0d0ae31bafc29f1e8f63cabe37bea4a24c71dd532a23893e3"}
{"level":"info","ts":"2026-07-14T11:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2f9bf91b582456f3910b80bac41e71045cbfb5c69031bd79d2f8641d1552491","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a713c65ada16be0d0ae31bafc29f1e8f63cabe37bea4a24c71dd532a23893e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:50:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:50:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a713c65ada16be0d0ae31bafc29f1e8f63cabe37bea4a24c71dd532a23893e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2f9bf91b582456f3910b80bac41e71045cbfb5c69031bd79d2f8641d1552491","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a713c65ada16be0d0ae31bafc29f1e8f63cabe37bea4a24c71dd532a23893e3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a713c65ada16be0d0ae31bafc29f1e8f63cabe37bea4a24c71dd532a23893e3"}
{"level":"debug","ts":"2026-07-14T11:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a713c65ada16be0d0ae31bafc29f1e8f63cabe37bea4a24c71dd532a23893e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:50:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:50:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a713c65ada16be0d0ae31bafc29f1e8f63cabe37bea4a24c71dd532a23893e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a713c65ada16be0d0ae31bafc29f1e8f63cabe37bea4a24c71dd532a23893e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a713c65ada16be0d0ae31bafc29f1e8f63cabe37bea4a24c71dd532a23893e3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2f9bf91b582456f3910b80bac41e71045cbfb5c69031bd79d2f8641d1552491"}
{"level":"info","ts":"2026-07-14T11:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a713c65ada16be0d0ae31bafc29f1e8f63cabe37bea4a24c71dd532a23893e3"}
{"level":"debug","ts":"2026-07-14T11:50:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d308ea6f182373125f1f87d79ab4fb2c62745b1d19eca518cfdb27b9ffff852","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:50:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d308ea6f182373125f1f87d79ab4fb2c62745b1d19eca518cfdb27b9ffff852"}
{"level":"debug","ts":"2026-07-14T11:50:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5844f17889755e1ece8f442e133b34c4a409f46c1a36b3e1ea114a08d96abac7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:50:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5844f17889755e1ece8f442e133b34c4a409f46c1a36b3e1ea114a08d96abac7"}
{"level":"debug","ts":"2026-07-14T11:50:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6858b9a768f949668f2d87dd935034e889217d5d1dc89aa049909d9b99c425c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:50:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6858b9a768f949668f2d87dd935034e889217d5d1dc89aa049909d9b99c425c7"}
{"level":"debug","ts":"2026-07-14T11:50:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6e6ca5c7328ba71d44e74f54f437d5e88cd79bfbd0487cf13e7dabad36bb00c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:50:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:50:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6e6ca5c7328ba71d44e74f54f437d5e88cd79bfbd0487cf13e7dabad36bb00c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6e6ca5c7328ba71d44e74f54f437d5e88cd79bfbd0487cf13e7dabad36bb00c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:50:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6e6ca5c7328ba71d44e74f54f437d5e88cd79bfbd0487cf13e7dabad36bb00c"}
{"level":"debug","ts":"2026-07-14T11:50:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6e6ca5c7328ba71d44e74f54f437d5e88cd79bfbd0487cf13e7dabad36bb00c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:50:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6e6ca5c7328ba71d44e74f54f437d5e88cd79bfbd0487cf13e7dabad36bb00c"}
{"level":"debug","ts":"2026-07-14T11:50:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6e6ca5c7328ba71d44e74f54f437d5e88cd79bfbd0487cf13e7dabad36bb00c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:50:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:50:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f6e6ca5c7328ba71d44e74f54f437d5e88cd79bfbd0487cf13e7dabad36bb00c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6e6ca5c7328ba71d44e74f54f437d5e88cd79bfbd0487cf13e7dabad36bb00c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6e6ca5c7328ba71d44e74f54f437d5e88cd79bfbd0487cf13e7dabad36bb00c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:50:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6e6ca5c7328ba71d44e74f54f437d5e88cd79bfbd0487cf13e7dabad36bb00c"}
{"level":"debug","ts":"2026-07-14T11:50:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1194fa06755b015ac37b062e29cec37864b855bf631d747032a312657adb33da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:50:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:50:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1194fa06755b015ac37b062e29cec37864b855bf631d747032a312657adb33da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1194fa06755b015ac37b062e29cec37864b855bf631d747032a312657adb33da","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:50:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1194fa06755b015ac37b062e29cec37864b855bf631d747032a312657adb33da"}
{"level":"debug","ts":"2026-07-14T11:50:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1194fa06755b015ac37b062e29cec37864b855bf631d747032a312657adb33da","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:50:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1194fa06755b015ac37b062e29cec37864b855bf631d747032a312657adb33da"}
{"level":"debug","ts":"2026-07-14T11:50:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1194fa06755b015ac37b062e29cec37864b855bf631d747032a312657adb33da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:50:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:50:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1194fa06755b015ac37b062e29cec37864b855bf631d747032a312657adb33da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1194fa06755b015ac37b062e29cec37864b855bf631d747032a312657adb33da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1194fa06755b015ac37b062e29cec37864b855bf631d747032a312657adb33da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:50:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:50:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1194fa06755b015ac37b062e29cec37864b855bf631d747032a312657adb33da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1194fa06755b015ac37b062e29cec37864b855bf631d747032a312657adb33da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1194fa06755b015ac37b062e29cec37864b855bf631d747032a312657adb33da","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:50:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1194fa06755b015ac37b062e29cec37864b855bf631d747032a312657adb33da"}
{"level":"debug","ts":"2026-07-14T11:50:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1194fa06755b015ac37b062e29cec37864b855bf631d747032a312657adb33da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a34acb983277b8fea458897ed99bf8633f13524c4f009657f8c9652ee72ef3a2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:50:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1194fa06755b015ac37b062e29cec37864b855bf631d747032a312657adb33da"}
{"level":"info","ts":"2026-07-14T11:50:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a34acb983277b8fea458897ed99bf8633f13524c4f009657f8c9652ee72ef3a2"}
{"level":"debug","ts":"2026-07-14T11:50:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1194fa06755b015ac37b062e29cec37864b855bf631d747032a312657adb33da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:50:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:50:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1194fa06755b015ac37b062e29cec37864b855bf631d747032a312657adb33da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1194fa06755b015ac37b062e29cec37864b855bf631d747032a312657adb33da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1194fa06755b015ac37b062e29cec37864b855bf631d747032a312657adb33da","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:50:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1194fa06755b015ac37b062e29cec37864b855bf631d747032a312657adb33da"}
{"level":"debug","ts":"2026-07-14T11:50:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a713c65ada16be0d0ae31bafc29f1e8f63cabe37bea4a24c71dd532a23893e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:50:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:50:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a713c65ada16be0d0ae31bafc29f1e8f63cabe37bea4a24c71dd532a23893e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a713c65ada16be0d0ae31bafc29f1e8f63cabe37bea4a24c71dd532a23893e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a713c65ada16be0d0ae31bafc29f1e8f63cabe37bea4a24c71dd532a23893e3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:50:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a713c65ada16be0d0ae31bafc29f1e8f63cabe37bea4a24c71dd532a23893e3"}
{"level":"debug","ts":"2026-07-14T11:50:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a713c65ada16be0d0ae31bafc29f1e8f63cabe37bea4a24c71dd532a23893e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a713c65ada16be0d0ae31bafc29f1e8f63cabe37bea4a24c71dd532a23893e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd7ea4d701d4e25db0264932949b154442b1e66def9a019b18ea500d8ecf1b1b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:50:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a713c65ada16be0d0ae31bafc29f1e8f63cabe37bea4a24c71dd532a23893e3"}
{"level":"info","ts":"2026-07-14T11:50:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd7ea4d701d4e25db0264932949b154442b1e66def9a019b18ea500d8ecf1b1b"}
{"level":"debug","ts":"2026-07-14T11:50:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a713c65ada16be0d0ae31bafc29f1e8f63cabe37bea4a24c71dd532a23893e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:50:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:50:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a713c65ada16be0d0ae31bafc29f1e8f63cabe37bea4a24c71dd532a23893e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a713c65ada16be0d0ae31bafc29f1e8f63cabe37bea4a24c71dd532a23893e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a713c65ada16be0d0ae31bafc29f1e8f63cabe37bea4a24c71dd532a23893e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2f9bf91b582456f3910b80bac41e71045cbfb5c69031bd79d2f8641d1552491","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:50:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a713c65ada16be0d0ae31bafc29f1e8f63cabe37bea4a24c71dd532a23893e3"}
{"level":"info","ts":"2026-07-14T11:50:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2f9bf91b582456f3910b80bac41e71045cbfb5c69031bd79d2f8641d1552491"}
{"level":"debug","ts":"2026-07-14T11:50:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab029f7eac088a5fb06ea537e26ba444fda12a8ddf39fb37edf46030876f08f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e09e8fc76b0fd2cb20d1a8dd506bea309952d6e2499bfacc28f37bf64bc74e5a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:50:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab029f7eac088a5fb06ea537e26ba444fda12a8ddf39fb37edf46030876f08f7"}
{"level":"info","ts":"2026-07-14T11:50:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e09e8fc76b0fd2cb20d1a8dd506bea309952d6e2499bfacc28f37bf64bc74e5a"}
{"level":"debug","ts":"2026-07-14T11:50:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ebcf52bf1e0caeb7fbca1d852a6095a62a3a3ec47eec5363779aa5754e42aee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:50:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:50:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ebcf52bf1e0caeb7fbca1d852a6095a62a3a3ec47eec5363779aa5754e42aee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ebcf52bf1e0caeb7fbca1d852a6095a62a3a3ec47eec5363779aa5754e42aee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:50:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ebcf52bf1e0caeb7fbca1d852a6095a62a3a3ec47eec5363779aa5754e42aee"}
{"level":"debug","ts":"2026-07-14T11:50:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ebcf52bf1e0caeb7fbca1d852a6095a62a3a3ec47eec5363779aa5754e42aee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:50:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ebcf52bf1e0caeb7fbca1d852a6095a62a3a3ec47eec5363779aa5754e42aee"}
{"level":"debug","ts":"2026-07-14T11:50:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ebcf52bf1e0caeb7fbca1d852a6095a62a3a3ec47eec5363779aa5754e42aee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:50:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:50:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ebcf52bf1e0caeb7fbca1d852a6095a62a3a3ec47eec5363779aa5754e42aee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ebcf52bf1e0caeb7fbca1d852a6095a62a3a3ec47eec5363779aa5754e42aee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ebcf52bf1e0caeb7fbca1d852a6095a62a3a3ec47eec5363779aa5754e42aee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:50:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ebcf52bf1e0caeb7fbca1d852a6095a62a3a3ec47eec5363779aa5754e42aee"}
{"level":"debug","ts":"2026-07-14T11:50:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8a9e669899d7685f9e992b0a039a25b79e4a8fa08510f4dbfd79e67b353a76f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:50:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:50:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8a9e669899d7685f9e992b0a039a25b79e4a8fa08510f4dbfd79e67b353a76f"}
{"level":"info","ts":"2026-07-14T11:50:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8a9e669899d7685f9e992b0a039a25b79e4a8fa08510f4dbfd79e67b353a76f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8a9e669899d7685f9e992b0a039a25b79e4a8fa08510f4dbfd79e67b353a76f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:50:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:50:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a8a9e669899d7685f9e992b0a039a25b79e4a8fa08510f4dbfd79e67b353a76f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8a9e669899d7685f9e992b0a039a25b79e4a8fa08510f4dbfd79e67b353a76f"}
{"level":"info","ts":"2026-07-14T11:50:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8a9e669899d7685f9e992b0a039a25b79e4a8fa08510f4dbfd79e67b353a76f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8a9e669899d7685f9e992b0a039a25b79e4a8fa08510f4dbfd79e67b353a76f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:50:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:50:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8a9e669899d7685f9e992b0a039a25b79e4a8fa08510f4dbfd79e67b353a76f"}
{"level":"info","ts":"2026-07-14T11:50:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8a9e669899d7685f9e992b0a039a25b79e4a8fa08510f4dbfd79e67b353a76f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8a9e669899d7685f9e992b0a039a25b79e4a8fa08510f4dbfd79e67b353a76f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8a9e669899d7685f9e992b0a039a25b79e4a8fa08510f4dbfd79e67b353a76f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8e8f3d5dea0dffa121ed51f1940bbeb358f9b39839594b1f853d62c314e3bfb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:50:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8a9e669899d7685f9e992b0a039a25b79e4a8fa08510f4dbfd79e67b353a76f"}
{"level":"debug","ts":"2026-07-14T11:50:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8a9e669899d7685f9e992b0a039a25b79e4a8fa08510f4dbfd79e67b353a76f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:50:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:50:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a8a9e669899d7685f9e992b0a039a25b79e4a8fa08510f4dbfd79e67b353a76f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8e8f3d5dea0dffa121ed51f1940bbeb358f9b39839594b1f853d62c314e3bfb"}
{"level":"info","ts":"2026-07-14T11:50:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8a9e669899d7685f9e992b0a039a25b79e4a8fa08510f4dbfd79e67b353a76f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8a9e669899d7685f9e992b0a039a25b79e4a8fa08510f4dbfd79e67b353a76f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:50:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:50:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8a9e669899d7685f9e992b0a039a25b79e4a8fa08510f4dbfd79e67b353a76f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af8c2e59c857902dcab9205756cba6779323e9728f8c046e66a334e1c319dec1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8a9e669899d7685f9e992b0a039a25b79e4a8fa08510f4dbfd79e67b353a76f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:50:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8a9e669899d7685f9e992b0a039a25b79e4a8fa08510f4dbfd79e67b353a76f"}
{"level":"debug","ts":"2026-07-14T11:50:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8a9e669899d7685f9e992b0a039a25b79e4a8fa08510f4dbfd79e67b353a76f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:50:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:50:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a8a9e669899d7685f9e992b0a039a25b79e4a8fa08510f4dbfd79e67b353a76f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af8c2e59c857902dcab9205756cba6779323e9728f8c046e66a334e1c319dec1"}
{"level":"info","ts":"2026-07-14T11:50:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8a9e669899d7685f9e992b0a039a25b79e4a8fa08510f4dbfd79e67b353a76f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"821cab5b6da4cea066bf36217a86feb910d4ff484c5b0f8665e3b25d8532fb4f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8a9e669899d7685f9e992b0a039a25b79e4a8fa08510f4dbfd79e67b353a76f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:50:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:50:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8a9e669899d7685f9e992b0a039a25b79e4a8fa08510f4dbfd79e67b353a76f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f92f451cd52fff1b53c9c514688b8392538fcd7598351e7df099fbf4ad94975","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8a9e669899d7685f9e992b0a039a25b79e4a8fa08510f4dbfd79e67b353a76f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:50:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8a9e669899d7685f9e992b0a039a25b79e4a8fa08510f4dbfd79e67b353a76f"}
{"level":"debug","ts":"2026-07-14T11:50:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8a9e669899d7685f9e992b0a039a25b79e4a8fa08510f4dbfd79e67b353a76f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:50:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:50:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a8a9e669899d7685f9e992b0a039a25b79e4a8fa08510f4dbfd79e67b353a76f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8a9e669899d7685f9e992b0a039a25b79e4a8fa08510f4dbfd79e67b353a76f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ff00153df7f2780e08f9433abf712a9e0ec1d2791f3808a60779a2499e903f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8a9e669899d7685f9e992b0a039a25b79e4a8fa08510f4dbfd79e67b353a76f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:50:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/821cab5b6da4cea066bf36217a86feb910d4ff484c5b0f8665e3b25d8532fb4f"}
{"level":"debug","ts":"2026-07-14T11:50:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35aff3d818fa66871c7f0afa0bdc15d2c48ba11545d5018cc16ec7e9d03ddcdc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:50:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f92f451cd52fff1b53c9c514688b8392538fcd7598351e7df099fbf4ad94975"}
{"level":"info","ts":"2026-07-14T11:50:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8a9e669899d7685f9e992b0a039a25b79e4a8fa08510f4dbfd79e67b353a76f"}
{"level":"info","ts":"2026-07-14T11:50:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ff00153df7f2780e08f9433abf712a9e0ec1d2791f3808a60779a2499e903f3"}
{"level":"debug","ts":"2026-07-14T11:50:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2820e93b0626cb9190cc24818b3129a8eda4fbc723cacd082f91fad7f6628e2a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf55d20ab8d499defbb2f5184c774018d7a68c0a8e6a155bde1c9ac8cde067f9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:50:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35aff3d818fa66871c7f0afa0bdc15d2c48ba11545d5018cc16ec7e9d03ddcdc"}
{"level":"debug","ts":"2026-07-14T11:50:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6fa4d631ea23ce33cf2f47b22fa4b349d345301dd245b451ccbbddd69b7cfd95","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:50:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2820e93b0626cb9190cc24818b3129a8eda4fbc723cacd082f91fad7f6628e2a"}
{"level":"debug","ts":"2026-07-14T11:50:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd7f1fbc6933dffa0777c81a23ccd7797b727b4788b727485f292e0511d03653","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:50:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf55d20ab8d499defbb2f5184c774018d7a68c0a8e6a155bde1c9ac8cde067f9"}
{"level":"debug","ts":"2026-07-14T11:50:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41f9811b8a13731e2dc30e554840f6bf771749e01587093fc09367fb66bce994","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:50:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fa4d631ea23ce33cf2f47b22fa4b349d345301dd245b451ccbbddd69b7cfd95"}
{"level":"info","ts":"2026-07-14T11:50:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd7f1fbc6933dffa0777c81a23ccd7797b727b4788b727485f292e0511d03653"}
{"level":"info","ts":"2026-07-14T11:50:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41f9811b8a13731e2dc30e554840f6bf771749e01587093fc09367fb66bce994"}
{"level":"info","ts":"2026-07-14T11:50:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7220ea42-3de3-4d5a-87de-5bd8aba4e097","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:47448","PortSpecifier":{"PortValue":47448}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7220ea42-3de3-4d5a-87de-5bd8aba4e097","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-6b8edc.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T11:50:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7220ea42-3de3-4d5a-87de-5bd8aba4e097","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:47448","PortSpecifier":{"PortValue":47448}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784029818,"nanos":248553425},"http":{"id":"7220ea42-3de3-4d5a-87de-5bd8aba4e097","method":"POST","headers":{":authority":"e2e-shared-a-6b8edc.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T11:50:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7220ea42-3de3-4d5a-87de-5bd8aba4e097","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T11:50:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7220ea42-3de3-4d5a-87de-5bd8aba4e097","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"98097697-1e03-4f32-b7b3-64092a0d335b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=33f0dde7-3530-4b38-b243-0793ef727757"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1e1c21f43337"]}}
{"level":"debug","ts":"2026-07-14T11:50:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7220ea42-3de3-4d5a-87de-5bd8aba4e097","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1e1c21f43337"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=33f0dde7-3530-4b38-b243-0793ef727757"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"98097697-1e03-4f32-b7b3-64092a0d335b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"dd7f1fbc6933dffa0777c81a23ccd7797b727b4788b727485f292e0511d03653"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6b8edc.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T11:50:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7220ea42-3de3-4d5a-87de-5bd8aba4e097","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:50:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7220ea42-3de3-4d5a-87de-5bd8aba4e097","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:50:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7220ea42-3de3-4d5a-87de-5bd8aba4e097","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6b8edc/sub-test-model-6b8edc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6b8edc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:50:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7220ea42-3de3-4d5a-87de-5bd8aba4e097","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T11:50:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7220ea42-3de3-4d5a-87de-5bd8aba4e097","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T11:50:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7220ea42-3de3-4d5a-87de-5bd8aba4e097","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T11:50:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7220ea42-3de3-4d5a-87de-5bd8aba4e097","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T11:50:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7220ea42-3de3-4d5a-87de-5bd8aba4e097","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T11:50:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"447c8bc2-858b-4403-aaff-4d49a5c3f0a6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:48650","PortSpecifier":{"PortValue":48650}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"447c8bc2-858b-4403-aaff-4d49a5c3f0a6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-5c5a7d.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T11:50:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"447c8bc2-858b-4403-aaff-4d49a5c3f0a6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:48650","PortSpecifier":{"PortValue":48650}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784029818,"nanos":291013241},"http":{"id":"447c8bc2-858b-4403-aaff-4d49a5c3f0a6","method":"POST","headers":{":authority":"e2e-shared-b-5c5a7d.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T11:50:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"447c8bc2-858b-4403-aaff-4d49a5c3f0a6","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T11:50:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"447c8bc2-858b-4403-aaff-4d49a5c3f0a6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"98097697-1e03-4f32-b7b3-64092a0d335b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=33f0dde7-3530-4b38-b243-0793ef727757"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1e1c21f43337"]}}
{"level":"debug","ts":"2026-07-14T11:50:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"447c8bc2-858b-4403-aaff-4d49a5c3f0a6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1e1c21f43337"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=33f0dde7-3530-4b38-b243-0793ef727757"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"98097697-1e03-4f32-b7b3-64092a0d335b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e09e8fc76b0fd2cb20d1a8dd506bea309952d6e2499bfacc28f37bf64bc74e5a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-5c5a7d.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T11:50:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"447c8bc2-858b-4403-aaff-4d49a5c3f0a6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:50:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"447c8bc2-858b-4403-aaff-4d49a5c3f0a6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:50:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"447c8bc2-858b-4403-aaff-4d49a5c3f0a6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-5c5a7d/sub-test-model-5c5a7d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-5c5a7d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:50:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"447c8bc2-858b-4403-aaff-4d49a5c3f0a6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T11:50:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"447c8bc2-858b-4403-aaff-4d49a5c3f0a6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T11:50:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"447c8bc2-858b-4403-aaff-4d49a5c3f0a6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T11:50:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"447c8bc2-858b-4403-aaff-4d49a5c3f0a6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T11:50:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"447c8bc2-858b-4403-aaff-4d49a5c3f0a6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T11:50:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"728f0e49-7e45-4678-94e7-b91d0738b76c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:47464","PortSpecifier":{"PortValue":47464}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"728f0e49-7e45-4678-94e7-b91d0738b76c","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-6b8edc.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T11:50:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"728f0e49-7e45-4678-94e7-b91d0738b76c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:47464","PortSpecifier":{"PortValue":47464}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784029818,"nanos":333279301},"http":{"id":"728f0e49-7e45-4678-94e7-b91d0738b76c","method":"GET","headers":{":authority":"e2e-shared-a-6b8edc.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T11:50:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"728f0e49-7e45-4678-94e7-b91d0738b76c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-bUlChjqTa3leNjYA_5gqWvUC8fY9wq5WiQSewWWvxlMvXE4ChRgxeCjYiN3p"}
{"level":"debug","ts":"2026-07-14T11:50:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"728f0e49-7e45-4678-94e7-b91d0738b76c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6b8edc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-bUlChjqTa3leNjYA_5gqWvUC8fY9wq5WiQSewWWvxlMvXE4ChRgxeCjYiN3p\"}"}
{"level":"debug","ts":"2026-07-14T11:50:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"728f0e49-7e45-4678-94e7-b91d0738b76c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6b8edc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"12f39f76-26c2-4a3b-9897-df4378b46671","keyName":"e2e-sub-iso-5968cb","subscription":"e2e-a-only-b61588","tenant":"e2e-shared-a-6b8edc","userId":"12f39f76-26c2-4a3b-9897-df4378b46671","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T11:50:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"728f0e49-7e45-4678-94e7-b91d0738b76c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T11:50:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"728f0e49-7e45-4678-94e7-b91d0738b76c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:50:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"728f0e49-7e45-4678-94e7-b91d0738b76c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:50:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"728f0e49-7e45-4678-94e7-b91d0738b76c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6b8edc/sub-test-model-6b8edc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6b8edc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:50:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"728f0e49-7e45-4678-94e7-b91d0738b76c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T11:50:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"728f0e49-7e45-4678-94e7-b91d0738b76c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-14T11:50:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"728f0e49-7e45-4678-94e7-b91d0738b76c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-b61588"}
{"level":"debug","ts":"2026-07-14T11:50:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"728f0e49-7e45-4678-94e7-b91d0738b76c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T11:50:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"728f0e49-7e45-4678-94e7-b91d0738b76c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T11:50:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"728f0e49-7e45-4678-94e7-b91d0738b76c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T11:50:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7ef444ea-3220-45a3-9105-a0ecc1ab1985","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:48660","PortSpecifier":{"PortValue":48660}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7ef444ea-3220-45a3-9105-a0ecc1ab1985","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-5c5a7d.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T11:50:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7ef444ea-3220-45a3-9105-a0ecc1ab1985","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:48660","PortSpecifier":{"PortValue":48660}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784029818,"nanos":374751116},"http":{"id":"7ef444ea-3220-45a3-9105-a0ecc1ab1985","method":"GET","headers":{":authority":"e2e-shared-b-5c5a7d.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T11:50:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7ef444ea-3220-45a3-9105-a0ecc1ab1985","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-17IFxZvT1ywZXpXuK_bvJMuOXqcaqGHXolOcaIyCHBZgUzUwbsCqDCJwpaBQR"}
{"level":"debug","ts":"2026-07-14T11:50:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7ef444ea-3220-45a3-9105-a0ecc1ab1985","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-5c5a7d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-17IFxZvT1ywZXpXuK_bvJMuOXqcaqGHXolOcaIyCHBZgUzUwbsCqDCJwpaBQR\"}"}
{"level":"debug","ts":"2026-07-14T11:50:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7ef444ea-3220-45a3-9105-a0ecc1ab1985","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-5c5a7d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ca9539cb-1970-4856-853e-e5fee4e5cabb","keyName":"e2e-sub-iso-1b90ab","subscription":"e2e-b-only-b61588","tenant":"e2e-shared-b-5c5a7d","userId":"ca9539cb-1970-4856-853e-e5fee4e5cabb","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T11:50:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7ef444ea-3220-45a3-9105-a0ecc1ab1985","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T11:50:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ef444ea-3220-45a3-9105-a0ecc1ab1985","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:50:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ef444ea-3220-45a3-9105-a0ecc1ab1985","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:50:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ef444ea-3220-45a3-9105-a0ecc1ab1985","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-5c5a7d/sub-test-model-5c5a7d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-5c5a7d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:50:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7ef444ea-3220-45a3-9105-a0ecc1ab1985","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-14T11:50:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7ef444ea-3220-45a3-9105-a0ecc1ab1985","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T11:50:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7ef444ea-3220-45a3-9105-a0ecc1ab1985","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-b61588"}
{"level":"debug","ts":"2026-07-14T11:50:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7ef444ea-3220-45a3-9105-a0ecc1ab1985","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T11:50:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7ef444ea-3220-45a3-9105-a0ecc1ab1985","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T11:50:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7ef444ea-3220-45a3-9105-a0ecc1ab1985","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T11:50:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fbf72622-3318-4a5d-9acf-925685cc6105","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:44468","PortSpecifier":{"PortValue":44468}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fbf72622-3318-4a5d-9acf-925685cc6105","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-6b8edc.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T11:50:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fbf72622-3318-4a5d-9acf-925685cc6105","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:44468","PortSpecifier":{"PortValue":44468}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784029830,"nanos":771733290},"http":{"id":"fbf72622-3318-4a5d-9acf-925685cc6105","method":"POST","headers":{":authority":"e2e-shared-a-6b8edc.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T11:50:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fbf72622-3318-4a5d-9acf-925685cc6105","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T11:50:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fbf72622-3318-4a5d-9acf-925685cc6105","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"98097697-1e03-4f32-b7b3-64092a0d335b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=33f0dde7-3530-4b38-b243-0793ef727757"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1e1c21f43337"]}}
{"level":"debug","ts":"2026-07-14T11:50:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fbf72622-3318-4a5d-9acf-925685cc6105","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1e1c21f43337"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=33f0dde7-3530-4b38-b243-0793ef727757"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"98097697-1e03-4f32-b7b3-64092a0d335b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"dd7f1fbc6933dffa0777c81a23ccd7797b727b4788b727485f292e0511d03653"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6b8edc.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T11:50:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fbf72622-3318-4a5d-9acf-925685cc6105","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:50:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fbf72622-3318-4a5d-9acf-925685cc6105","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:50:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fbf72622-3318-4a5d-9acf-925685cc6105","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6b8edc/sub-test-model-6b8edc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6b8edc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:50:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fbf72622-3318-4a5d-9acf-925685cc6105","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T11:50:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fbf72622-3318-4a5d-9acf-925685cc6105","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T11:50:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fbf72622-3318-4a5d-9acf-925685cc6105","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T11:50:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fbf72622-3318-4a5d-9acf-925685cc6105","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T11:50:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fbf72622-3318-4a5d-9acf-925685cc6105","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T11:50:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c835fd7a-4526-418b-9bc9-799bb8c7c6a8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:42132","PortSpecifier":{"PortValue":42132}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c835fd7a-4526-418b-9bc9-799bb8c7c6a8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-5c5a7d.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T11:50:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c835fd7a-4526-418b-9bc9-799bb8c7c6a8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:42132","PortSpecifier":{"PortValue":42132}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784029830,"nanos":811126206},"http":{"id":"c835fd7a-4526-418b-9bc9-799bb8c7c6a8","method":"POST","headers":{":authority":"e2e-shared-b-5c5a7d.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T11:50:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c835fd7a-4526-418b-9bc9-799bb8c7c6a8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T11:50:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c835fd7a-4526-418b-9bc9-799bb8c7c6a8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"98097697-1e03-4f32-b7b3-64092a0d335b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=33f0dde7-3530-4b38-b243-0793ef727757"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1e1c21f43337"]}}
{"level":"debug","ts":"2026-07-14T11:50:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c835fd7a-4526-418b-9bc9-799bb8c7c6a8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1e1c21f43337"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=33f0dde7-3530-4b38-b243-0793ef727757"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"98097697-1e03-4f32-b7b3-64092a0d335b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e09e8fc76b0fd2cb20d1a8dd506bea309952d6e2499bfacc28f37bf64bc74e5a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-5c5a7d.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T11:50:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c835fd7a-4526-418b-9bc9-799bb8c7c6a8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:50:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c835fd7a-4526-418b-9bc9-799bb8c7c6a8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:50:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c835fd7a-4526-418b-9bc9-799bb8c7c6a8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-5c5a7d/sub-test-model-5c5a7d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-5c5a7d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:50:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c835fd7a-4526-418b-9bc9-799bb8c7c6a8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T11:50:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c835fd7a-4526-418b-9bc9-799bb8c7c6a8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T11:50:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c835fd7a-4526-418b-9bc9-799bb8c7c6a8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T11:50:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c835fd7a-4526-418b-9bc9-799bb8c7c6a8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T11:50:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c835fd7a-4526-418b-9bc9-799bb8c7c6a8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T11:50:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"487081c1-22c4-4b87-9fd4-c09735dea086","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:44476","PortSpecifier":{"PortValue":44476}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"487081c1-22c4-4b87-9fd4-c09735dea086","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-6b8edc.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T11:50:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"487081c1-22c4-4b87-9fd4-c09735dea086","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:44476","PortSpecifier":{"PortValue":44476}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784029830,"nanos":842570950},"http":{"id":"487081c1-22c4-4b87-9fd4-c09735dea086","method":"POST","headers":{":authority":"e2e-shared-a-6b8edc.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T11:50:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"487081c1-22c4-4b87-9fd4-c09735dea086","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1R59bJVdPdOjHjPHS_1WrZBcQIgNgzgJO0nHbUSabYdWv5820kYl0vRtNA1NT"}
{"level":"debug","ts":"2026-07-14T11:50:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"487081c1-22c4-4b87-9fd4-c09735dea086","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6b8edc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1R59bJVdPdOjHjPHS_1WrZBcQIgNgzgJO0nHbUSabYdWv5820kYl0vRtNA1NT\"}"}
{"level":"debug","ts":"2026-07-14T11:50:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"487081c1-22c4-4b87-9fd4-c09735dea086","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6b8edc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"38f6ad54-6665-45fe-aee1-b1c0a803cd54","keyName":"e2e-sub-iso-c33ee4","subscription":"e2e-shared-sub-b0b621","tenant":"e2e-shared-a-6b8edc","userId":"38f6ad54-6665-45fe-aee1-b1c0a803cd54","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T11:50:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"487081c1-22c4-4b87-9fd4-c09735dea086","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T11:50:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"487081c1-22c4-4b87-9fd4-c09735dea086","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:50:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"487081c1-22c4-4b87-9fd4-c09735dea086","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:50:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"487081c1-22c4-4b87-9fd4-c09735dea086","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6b8edc/sub-test-model-6b8edc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6b8edc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:50:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"487081c1-22c4-4b87-9fd4-c09735dea086","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-14T11:50:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"487081c1-22c4-4b87-9fd4-c09735dea086","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T11:50:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"487081c1-22c4-4b87-9fd4-c09735dea086","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-b0b621"}
{"level":"debug","ts":"2026-07-14T11:50:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"487081c1-22c4-4b87-9fd4-c09735dea086","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T11:50:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"487081c1-22c4-4b87-9fd4-c09735dea086","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T11:50:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"487081c1-22c4-4b87-9fd4-c09735dea086","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T11:50:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5066c8f2-612a-4d00-b29c-96969729c091","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:42136","PortSpecifier":{"PortValue":42136}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5066c8f2-612a-4d00-b29c-96969729c091","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-5c5a7d.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T11:50:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5066c8f2-612a-4d00-b29c-96969729c091","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:42136","PortSpecifier":{"PortValue":42136}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784029830,"nanos":867525238},"http":{"id":"5066c8f2-612a-4d00-b29c-96969729c091","method":"POST","headers":{":authority":"e2e-shared-b-5c5a7d.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T11:50:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5066c8f2-612a-4d00-b29c-96969729c091","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1W6AZNZKTEaG69Dru_YDBF8qhRvsXaWiGf1pHiVgITupuP1jLbo5SDDEFIHHb"}
{"level":"debug","ts":"2026-07-14T11:50:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5066c8f2-612a-4d00-b29c-96969729c091","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-5c5a7d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1W6AZNZKTEaG69Dru_YDBF8qhRvsXaWiGf1pHiVgITupuP1jLbo5SDDEFIHHb\"}"}
{"level":"debug","ts":"2026-07-14T11:50:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5066c8f2-612a-4d00-b29c-96969729c091","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-5c5a7d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"bc211645-22d1-484b-8dcb-33bda1b8eb76","keyName":"e2e-sub-iso-3d5d40","subscription":"e2e-shared-sub-b0b621","tenant":"e2e-shared-b-5c5a7d","userId":"bc211645-22d1-484b-8dcb-33bda1b8eb76","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T11:50:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5066c8f2-612a-4d00-b29c-96969729c091","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T11:50:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5066c8f2-612a-4d00-b29c-96969729c091","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:50:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5066c8f2-612a-4d00-b29c-96969729c091","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:50:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5066c8f2-612a-4d00-b29c-96969729c091","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-5c5a7d/sub-test-model-5c5a7d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-5c5a7d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:50:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5066c8f2-612a-4d00-b29c-96969729c091","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T11:50:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5066c8f2-612a-4d00-b29c-96969729c091","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-14T11:50:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5066c8f2-612a-4d00-b29c-96969729c091","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-b0b621"}
{"level":"debug","ts":"2026-07-14T11:50:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5066c8f2-612a-4d00-b29c-96969729c091","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T11:50:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5066c8f2-612a-4d00-b29c-96969729c091","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T11:50:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5066c8f2-612a-4d00-b29c-96969729c091","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T11:50:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ab029f7eac088a5fb06ea537e26ba444fda12a8ddf39fb37edf46030876f08f7"}
{"level":"info","ts":"2026-07-14T11:50:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f6e6ca5c7328ba71d44e74f54f437d5e88cd79bfbd0487cf13e7dabad36bb00c"}
{"level":"info","ts":"2026-07-14T11:50:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/821cab5b6da4cea066bf36217a86feb910d4ff484c5b0f8665e3b25d8532fb4f"}
{"level":"info","ts":"2026-07-14T11:50:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cf55d20ab8d499defbb2f5184c774018d7a68c0a8e6a155bde1c9ac8cde067f9"}
{"level":"info","ts":"2026-07-14T11:50:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a34acb983277b8fea458897ed99bf8633f13524c4f009657f8c9652ee72ef3a2"}
{"level":"info","ts":"2026-07-14T11:50:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a8e8f3d5dea0dffa121ed51f1940bbeb358f9b39839594b1f853d62c314e3bfb"}
{"level":"info","ts":"2026-07-14T11:50:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5844f17889755e1ece8f442e133b34c4a409f46c1a36b3e1ea114a08d96abac7"}
{"level":"info","ts":"2026-07-14T11:50:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a8a9e669899d7685f9e992b0a039a25b79e4a8fa08510f4dbfd79e67b353a76f"}
{"level":"debug","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6807a5b34b8dbc16e7dde053f837a160791782f7d8fd4cec0c178abdefc6c4d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:50:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:50:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6807a5b34b8dbc16e7dde053f837a160791782f7d8fd4cec0c178abdefc6c4d1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6807a5b34b8dbc16e7dde053f837a160791782f7d8fd4cec0c178abdefc6c4d1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6807a5b34b8dbc16e7dde053f837a160791782f7d8fd4cec0c178abdefc6c4d1"}
{"level":"debug","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6807a5b34b8dbc16e7dde053f837a160791782f7d8fd4cec0c178abdefc6c4d1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6807a5b34b8dbc16e7dde053f837a160791782f7d8fd4cec0c178abdefc6c4d1"}
{"level":"debug","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6807a5b34b8dbc16e7dde053f837a160791782f7d8fd4cec0c178abdefc6c4d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:50:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:50:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6807a5b34b8dbc16e7dde053f837a160791782f7d8fd4cec0c178abdefc6c4d1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6807a5b34b8dbc16e7dde053f837a160791782f7d8fd4cec0c178abdefc6c4d1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6807a5b34b8dbc16e7dde053f837a160791782f7d8fd4cec0c178abdefc6c4d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:50:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:50:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6807a5b34b8dbc16e7dde053f837a160791782f7d8fd4cec0c178abdefc6c4d1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6807a5b34b8dbc16e7dde053f837a160791782f7d8fd4cec0c178abdefc6c4d1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6807a5b34b8dbc16e7dde053f837a160791782f7d8fd4cec0c178abdefc6c4d1"}
{"level":"debug","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6807a5b34b8dbc16e7dde053f837a160791782f7d8fd4cec0c178abdefc6c4d1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14818cdce25501620e08bd39a469a9a1dff96c564c7e81e7e9aa3ebadc998110","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:50:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:50:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6807a5b34b8dbc16e7dde053f837a160791782f7d8fd4cec0c178abdefc6c4d1"}
{"level":"info","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14818cdce25501620e08bd39a469a9a1dff96c564c7e81e7e9aa3ebadc998110","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6807a5b34b8dbc16e7dde053f837a160791782f7d8fd4cec0c178abdefc6c4d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:50:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:50:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6807a5b34b8dbc16e7dde053f837a160791782f7d8fd4cec0c178abdefc6c4d1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6807a5b34b8dbc16e7dde053f837a160791782f7d8fd4cec0c178abdefc6c4d1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14818cdce25501620e08bd39a469a9a1dff96c564c7e81e7e9aa3ebadc998110","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:50:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:50:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14818cdce25501620e08bd39a469a9a1dff96c564c7e81e7e9aa3ebadc998110"}
{"level":"info","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14818cdce25501620e08bd39a469a9a1dff96c564c7e81e7e9aa3ebadc998110","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6807a5b34b8dbc16e7dde053f837a160791782f7d8fd4cec0c178abdefc6c4d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:50:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:50:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6807a5b34b8dbc16e7dde053f837a160791782f7d8fd4cec0c178abdefc6c4d1"}
{"level":"info","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6807a5b34b8dbc16e7dde053f837a160791782f7d8fd4cec0c178abdefc6c4d1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14818cdce25501620e08bd39a469a9a1dff96c564c7e81e7e9aa3ebadc998110","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6807a5b34b8dbc16e7dde053f837a160791782f7d8fd4cec0c178abdefc6c4d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:50:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:50:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6807a5b34b8dbc16e7dde053f837a160791782f7d8fd4cec0c178abdefc6c4d1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14818cdce25501620e08bd39a469a9a1dff96c564c7e81e7e9aa3ebadc998110"}
{"level":"info","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6807a5b34b8dbc16e7dde053f837a160791782f7d8fd4cec0c178abdefc6c4d1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6807a5b34b8dbc16e7dde053f837a160791782f7d8fd4cec0c178abdefc6c4d1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6807a5b34b8dbc16e7dde053f837a160791782f7d8fd4cec0c178abdefc6c4d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:50:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:50:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6807a5b34b8dbc16e7dde053f837a160791782f7d8fd4cec0c178abdefc6c4d1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14818cdce25501620e08bd39a469a9a1dff96c564c7e81e7e9aa3ebadc998110","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:50:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:50:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["14818cdce25501620e08bd39a469a9a1dff96c564c7e81e7e9aa3ebadc998110"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6807a5b34b8dbc16e7dde053f837a160791782f7d8fd4cec0c178abdefc6c4d1"}
{"level":"info","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14818cdce25501620e08bd39a469a9a1dff96c564c7e81e7e9aa3ebadc998110","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6807a5b34b8dbc16e7dde053f837a160791782f7d8fd4cec0c178abdefc6c4d1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14818cdce25501620e08bd39a469a9a1dff96c564c7e81e7e9aa3ebadc998110","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6807a5b34b8dbc16e7dde053f837a160791782f7d8fd4cec0c178abdefc6c4d1"}
{"level":"debug","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6807a5b34b8dbc16e7dde053f837a160791782f7d8fd4cec0c178abdefc6c4d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:50:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:50:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6807a5b34b8dbc16e7dde053f837a160791782f7d8fd4cec0c178abdefc6c4d1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14818cdce25501620e08bd39a469a9a1dff96c564c7e81e7e9aa3ebadc998110"}
{"level":"info","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6807a5b34b8dbc16e7dde053f837a160791782f7d8fd4cec0c178abdefc6c4d1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6807a5b34b8dbc16e7dde053f837a160791782f7d8fd4cec0c178abdefc6c4d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:50:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:50:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6807a5b34b8dbc16e7dde053f837a160791782f7d8fd4cec0c178abdefc6c4d1"}
{"level":"info","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6807a5b34b8dbc16e7dde053f837a160791782f7d8fd4cec0c178abdefc6c4d1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6807a5b34b8dbc16e7dde053f837a160791782f7d8fd4cec0c178abdefc6c4d1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6807a5b34b8dbc16e7dde053f837a160791782f7d8fd4cec0c178abdefc6c4d1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6807a5b34b8dbc16e7dde053f837a160791782f7d8fd4cec0c178abdefc6c4d1"}
{"level":"debug","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02b25c5a20709ba0cc840454a53156c9123503ca13eb0b1e8d27d8bc19527b62","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:50:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:50:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02b25c5a20709ba0cc840454a53156c9123503ca13eb0b1e8d27d8bc19527b62","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6807a5b34b8dbc16e7dde053f837a160791782f7d8fd4cec0c178abdefc6c4d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:50:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:50:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6807a5b34b8dbc16e7dde053f837a160791782f7d8fd4cec0c178abdefc6c4d1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02b25c5a20709ba0cc840454a53156c9123503ca13eb0b1e8d27d8bc19527b62"}
{"level":"info","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6807a5b34b8dbc16e7dde053f837a160791782f7d8fd4cec0c178abdefc6c4d1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02b25c5a20709ba0cc840454a53156c9123503ca13eb0b1e8d27d8bc19527b62","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:50:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:50:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02b25c5a20709ba0cc840454a53156c9123503ca13eb0b1e8d27d8bc19527b62","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6807a5b34b8dbc16e7dde053f837a160791782f7d8fd4cec0c178abdefc6c4d1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02b25c5a20709ba0cc840454a53156c9123503ca13eb0b1e8d27d8bc19527b62"}
{"level":"debug","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02b25c5a20709ba0cc840454a53156c9123503ca13eb0b1e8d27d8bc19527b62","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:50:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:50:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02b25c5a20709ba0cc840454a53156c9123503ca13eb0b1e8d27d8bc19527b62"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02b25c5a20709ba0cc840454a53156c9123503ca13eb0b1e8d27d8bc19527b62","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02b25c5a20709ba0cc840454a53156c9123503ca13eb0b1e8d27d8bc19527b62","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:50:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:50:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02b25c5a20709ba0cc840454a53156c9123503ca13eb0b1e8d27d8bc19527b62"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6807a5b34b8dbc16e7dde053f837a160791782f7d8fd4cec0c178abdefc6c4d1"}
{"level":"error","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"02b25c5a20709ba0cc840454a53156c9123503ca13eb0b1e8d27d8bc19527b62","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"02b25c5a20709ba0cc840454a53156c9123503ca13eb0b1e8d27d8bc19527b62\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02b25c5a20709ba0cc840454a53156c9123503ca13eb0b1e8d27d8bc19527b62","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:50:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:50:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02b25c5a20709ba0cc840454a53156c9123503ca13eb0b1e8d27d8bc19527b62","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02b25c5a20709ba0cc840454a53156c9123503ca13eb0b1e8d27d8bc19527b62","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e070f1ad2c2e72cfc483b37a979ea853738ff8ed8bdfbe6aa8764aaa5bf55bc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:50:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:50:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02b25c5a20709ba0cc840454a53156c9123503ca13eb0b1e8d27d8bc19527b62"}
{"level":"info","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e070f1ad2c2e72cfc483b37a979ea853738ff8ed8bdfbe6aa8764aaa5bf55bc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02b25c5a20709ba0cc840454a53156c9123503ca13eb0b1e8d27d8bc19527b62","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:50:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:50:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02b25c5a20709ba0cc840454a53156c9123503ca13eb0b1e8d27d8bc19527b62"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02b25c5a20709ba0cc840454a53156c9123503ca13eb0b1e8d27d8bc19527b62","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e070f1ad2c2e72cfc483b37a979ea853738ff8ed8bdfbe6aa8764aaa5bf55bc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:50:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:50:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e070f1ad2c2e72cfc483b37a979ea853738ff8ed8bdfbe6aa8764aaa5bf55bc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02b25c5a20709ba0cc840454a53156c9123503ca13eb0b1e8d27d8bc19527b62","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e070f1ad2c2e72cfc483b37a979ea853738ff8ed8bdfbe6aa8764aaa5bf55bc5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e070f1ad2c2e72cfc483b37a979ea853738ff8ed8bdfbe6aa8764aaa5bf55bc5"}
{"level":"debug","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e070f1ad2c2e72cfc483b37a979ea853738ff8ed8bdfbe6aa8764aaa5bf55bc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:50:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:50:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e070f1ad2c2e72cfc483b37a979ea853738ff8ed8bdfbe6aa8764aaa5bf55bc5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e070f1ad2c2e72cfc483b37a979ea853738ff8ed8bdfbe6aa8764aaa5bf55bc5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02b25c5a20709ba0cc840454a53156c9123503ca13eb0b1e8d27d8bc19527b62"}
{"level":"debug","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e070f1ad2c2e72cfc483b37a979ea853738ff8ed8bdfbe6aa8764aaa5bf55bc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:50:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:50:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e070f1ad2c2e72cfc483b37a979ea853738ff8ed8bdfbe6aa8764aaa5bf55bc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e070f1ad2c2e72cfc483b37a979ea853738ff8ed8bdfbe6aa8764aaa5bf55bc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e070f1ad2c2e72cfc483b37a979ea853738ff8ed8bdfbe6aa8764aaa5bf55bc5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e070f1ad2c2e72cfc483b37a979ea853738ff8ed8bdfbe6aa8764aaa5bf55bc5"}
{"level":"debug","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e070f1ad2c2e72cfc483b37a979ea853738ff8ed8bdfbe6aa8764aaa5bf55bc5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e070f1ad2c2e72cfc483b37a979ea853738ff8ed8bdfbe6aa8764aaa5bf55bc5"}
{"level":"debug","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e070f1ad2c2e72cfc483b37a979ea853738ff8ed8bdfbe6aa8764aaa5bf55bc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:50:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:50:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e070f1ad2c2e72cfc483b37a979ea853738ff8ed8bdfbe6aa8764aaa5bf55bc5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e070f1ad2c2e72cfc483b37a979ea853738ff8ed8bdfbe6aa8764aaa5bf55bc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e070f1ad2c2e72cfc483b37a979ea853738ff8ed8bdfbe6aa8764aaa5bf55bc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:50:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:50:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e070f1ad2c2e72cfc483b37a979ea853738ff8ed8bdfbe6aa8764aaa5bf55bc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e070f1ad2c2e72cfc483b37a979ea853738ff8ed8bdfbe6aa8764aaa5bf55bc5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e070f1ad2c2e72cfc483b37a979ea853738ff8ed8bdfbe6aa8764aaa5bf55bc5"}
{"level":"debug","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e070f1ad2c2e72cfc483b37a979ea853738ff8ed8bdfbe6aa8764aaa5bf55bc5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e070f1ad2c2e72cfc483b37a979ea853738ff8ed8bdfbe6aa8764aaa5bf55bc5"}
{"level":"debug","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e070f1ad2c2e72cfc483b37a979ea853738ff8ed8bdfbe6aa8764aaa5bf55bc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:50:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:50:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e070f1ad2c2e72cfc483b37a979ea853738ff8ed8bdfbe6aa8764aaa5bf55bc5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e070f1ad2c2e72cfc483b37a979ea853738ff8ed8bdfbe6aa8764aaa5bf55bc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e070f1ad2c2e72cfc483b37a979ea853738ff8ed8bdfbe6aa8764aaa5bf55bc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:50:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:50:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e070f1ad2c2e72cfc483b37a979ea853738ff8ed8bdfbe6aa8764aaa5bf55bc5"}
{"level":"info","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e070f1ad2c2e72cfc483b37a979ea853738ff8ed8bdfbe6aa8764aaa5bf55bc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e070f1ad2c2e72cfc483b37a979ea853738ff8ed8bdfbe6aa8764aaa5bf55bc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e070f1ad2c2e72cfc483b37a979ea853738ff8ed8bdfbe6aa8764aaa5bf55bc5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e070f1ad2c2e72cfc483b37a979ea853738ff8ed8bdfbe6aa8764aaa5bf55bc5"}
{"level":"debug","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e070f1ad2c2e72cfc483b37a979ea853738ff8ed8bdfbe6aa8764aaa5bf55bc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:50:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:50:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e070f1ad2c2e72cfc483b37a979ea853738ff8ed8bdfbe6aa8764aaa5bf55bc5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e070f1ad2c2e72cfc483b37a979ea853738ff8ed8bdfbe6aa8764aaa5bf55bc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e070f1ad2c2e72cfc483b37a979ea853738ff8ed8bdfbe6aa8764aaa5bf55bc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:50:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:50:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e070f1ad2c2e72cfc483b37a979ea853738ff8ed8bdfbe6aa8764aaa5bf55bc5"}
{"level":"info","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e070f1ad2c2e72cfc483b37a979ea853738ff8ed8bdfbe6aa8764aaa5bf55bc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e070f1ad2c2e72cfc483b37a979ea853738ff8ed8bdfbe6aa8764aaa5bf55bc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e070f1ad2c2e72cfc483b37a979ea853738ff8ed8bdfbe6aa8764aaa5bf55bc5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e070f1ad2c2e72cfc483b37a979ea853738ff8ed8bdfbe6aa8764aaa5bf55bc5"}
{"level":"debug","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e070f1ad2c2e72cfc483b37a979ea853738ff8ed8bdfbe6aa8764aaa5bf55bc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:50:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:50:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e070f1ad2c2e72cfc483b37a979ea853738ff8ed8bdfbe6aa8764aaa5bf55bc5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e070f1ad2c2e72cfc483b37a979ea853738ff8ed8bdfbe6aa8764aaa5bf55bc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e070f1ad2c2e72cfc483b37a979ea853738ff8ed8bdfbe6aa8764aaa5bf55bc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:50:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:50:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e070f1ad2c2e72cfc483b37a979ea853738ff8ed8bdfbe6aa8764aaa5bf55bc5"}
{"level":"info","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e070f1ad2c2e72cfc483b37a979ea853738ff8ed8bdfbe6aa8764aaa5bf55bc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e070f1ad2c2e72cfc483b37a979ea853738ff8ed8bdfbe6aa8764aaa5bf55bc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:50:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:50:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e070f1ad2c2e72cfc483b37a979ea853738ff8ed8bdfbe6aa8764aaa5bf55bc5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e070f1ad2c2e72cfc483b37a979ea853738ff8ed8bdfbe6aa8764aaa5bf55bc5"}
{"level":"info","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e070f1ad2c2e72cfc483b37a979ea853738ff8ed8bdfbe6aa8764aaa5bf55bc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e070f1ad2c2e72cfc483b37a979ea853738ff8ed8bdfbe6aa8764aaa5bf55bc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:50:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:50:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e070f1ad2c2e72cfc483b37a979ea853738ff8ed8bdfbe6aa8764aaa5bf55bc5"}
{"level":"info","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e070f1ad2c2e72cfc483b37a979ea853738ff8ed8bdfbe6aa8764aaa5bf55bc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e070f1ad2c2e72cfc483b37a979ea853738ff8ed8bdfbe6aa8764aaa5bf55bc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:50:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:50:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e070f1ad2c2e72cfc483b37a979ea853738ff8ed8bdfbe6aa8764aaa5bf55bc5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e070f1ad2c2e72cfc483b37a979ea853738ff8ed8bdfbe6aa8764aaa5bf55bc5"}
{"level":"info","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e070f1ad2c2e72cfc483b37a979ea853738ff8ed8bdfbe6aa8764aaa5bf55bc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e070f1ad2c2e72cfc483b37a979ea853738ff8ed8bdfbe6aa8764aaa5bf55bc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:50:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:50:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e070f1ad2c2e72cfc483b37a979ea853738ff8ed8bdfbe6aa8764aaa5bf55bc5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e070f1ad2c2e72cfc483b37a979ea853738ff8ed8bdfbe6aa8764aaa5bf55bc5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e070f1ad2c2e72cfc483b37a979ea853738ff8ed8bdfbe6aa8764aaa5bf55bc5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e070f1ad2c2e72cfc483b37a979ea853738ff8ed8bdfbe6aa8764aaa5bf55bc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:50:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:50:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e070f1ad2c2e72cfc483b37a979ea853738ff8ed8bdfbe6aa8764aaa5bf55bc5"}
{"level":"info","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e070f1ad2c2e72cfc483b37a979ea853738ff8ed8bdfbe6aa8764aaa5bf55bc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e070f1ad2c2e72cfc483b37a979ea853738ff8ed8bdfbe6aa8764aaa5bf55bc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:50:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:50:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e070f1ad2c2e72cfc483b37a979ea853738ff8ed8bdfbe6aa8764aaa5bf55bc5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e070f1ad2c2e72cfc483b37a979ea853738ff8ed8bdfbe6aa8764aaa5bf55bc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e070f1ad2c2e72cfc483b37a979ea853738ff8ed8bdfbe6aa8764aaa5bf55bc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e070f1ad2c2e72cfc483b37a979ea853738ff8ed8bdfbe6aa8764aaa5bf55bc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:50:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:50:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e070f1ad2c2e72cfc483b37a979ea853738ff8ed8bdfbe6aa8764aaa5bf55bc5"}
{"level":"info","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e070f1ad2c2e72cfc483b37a979ea853738ff8ed8bdfbe6aa8764aaa5bf55bc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e070f1ad2c2e72cfc483b37a979ea853738ff8ed8bdfbe6aa8764aaa5bf55bc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:50:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:50:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e070f1ad2c2e72cfc483b37a979ea853738ff8ed8bdfbe6aa8764aaa5bf55bc5"}
{"level":"error","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e070f1ad2c2e72cfc483b37a979ea853738ff8ed8bdfbe6aa8764aaa5bf55bc5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e070f1ad2c2e72cfc483b37a979ea853738ff8ed8bdfbe6aa8764aaa5bf55bc5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e070f1ad2c2e72cfc483b37a979ea853738ff8ed8bdfbe6aa8764aaa5bf55bc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7b052134374a726612de2cac74d2cc38b807d718997176cb904fca41535d1d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:50:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:50:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e070f1ad2c2e72cfc483b37a979ea853738ff8ed8bdfbe6aa8764aaa5bf55bc5"}
{"level":"info","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7b052134374a726612de2cac74d2cc38b807d718997176cb904fca41535d1d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e070f1ad2c2e72cfc483b37a979ea853738ff8ed8bdfbe6aa8764aaa5bf55bc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:50:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:50:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e070f1ad2c2e72cfc483b37a979ea853738ff8ed8bdfbe6aa8764aaa5bf55bc5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7b052134374a726612de2cac74d2cc38b807d718997176cb904fca41535d1d8"}
{"level":"info","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e070f1ad2c2e72cfc483b37a979ea853738ff8ed8bdfbe6aa8764aaa5bf55bc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7b052134374a726612de2cac74d2cc38b807d718997176cb904fca41535d1d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:50:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:50:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7b052134374a726612de2cac74d2cc38b807d718997176cb904fca41535d1d8"}
{"level":"info","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7b052134374a726612de2cac74d2cc38b807d718997176cb904fca41535d1d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e070f1ad2c2e72cfc483b37a979ea853738ff8ed8bdfbe6aa8764aaa5bf55bc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:50:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:50:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e070f1ad2c2e72cfc483b37a979ea853738ff8ed8bdfbe6aa8764aaa5bf55bc5"}
{"level":"info","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e070f1ad2c2e72cfc483b37a979ea853738ff8ed8bdfbe6aa8764aaa5bf55bc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7b052134374a726612de2cac74d2cc38b807d718997176cb904fca41535d1d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e070f1ad2c2e72cfc483b37a979ea853738ff8ed8bdfbe6aa8764aaa5bf55bc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:50:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:50:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e070f1ad2c2e72cfc483b37a979ea853738ff8ed8bdfbe6aa8764aaa5bf55bc5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e070f1ad2c2e72cfc483b37a979ea853738ff8ed8bdfbe6aa8764aaa5bf55bc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e070f1ad2c2e72cfc483b37a979ea853738ff8ed8bdfbe6aa8764aaa5bf55bc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7b052134374a726612de2cac74d2cc38b807d718997176cb904fca41535d1d8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7b052134374a726612de2cac74d2cc38b807d718997176cb904fca41535d1d8"}
{"level":"debug","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f8bec79f2432774cdf78cbfd5d73b35acb21af97befd7c6f3b858900d01e5b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:50:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:50:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e070f1ad2c2e72cfc483b37a979ea853738ff8ed8bdfbe6aa8764aaa5bf55bc5"}
{"level":"info","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f8bec79f2432774cdf78cbfd5d73b35acb21af97befd7c6f3b858900d01e5b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f8bec79f2432774cdf78cbfd5d73b35acb21af97befd7c6f3b858900d01e5b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:50:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:50:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f8bec79f2432774cdf78cbfd5d73b35acb21af97befd7c6f3b858900d01e5b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7b052134374a726612de2cac74d2cc38b807d718997176cb904fca41535d1d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:50:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:50:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b7b052134374a726612de2cac74d2cc38b807d718997176cb904fca41535d1d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f8bec79f2432774cdf78cbfd5d73b35acb21af97befd7c6f3b858900d01e5b6"}
{"level":"info","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7b052134374a726612de2cac74d2cc38b807d718997176cb904fca41535d1d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f8bec79f2432774cdf78cbfd5d73b35acb21af97befd7c6f3b858900d01e5b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7b052134374a726612de2cac74d2cc38b807d718997176cb904fca41535d1d8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f8bec79f2432774cdf78cbfd5d73b35acb21af97befd7c6f3b858900d01e5b6"}
{"level":"debug","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f8bec79f2432774cdf78cbfd5d73b35acb21af97befd7c6f3b858900d01e5b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:50:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:50:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f8bec79f2432774cdf78cbfd5d73b35acb21af97befd7c6f3b858900d01e5b6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7b052134374a726612de2cac74d2cc38b807d718997176cb904fca41535d1d8"}
{"level":"info","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f8bec79f2432774cdf78cbfd5d73b35acb21af97befd7c6f3b858900d01e5b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f8bec79f2432774cdf78cbfd5d73b35acb21af97befd7c6f3b858900d01e5b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:50:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:50:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f8bec79f2432774cdf78cbfd5d73b35acb21af97befd7c6f3b858900d01e5b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f8bec79f2432774cdf78cbfd5d73b35acb21af97befd7c6f3b858900d01e5b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f8bec79f2432774cdf78cbfd5d73b35acb21af97befd7c6f3b858900d01e5b6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f8bec79f2432774cdf78cbfd5d73b35acb21af97befd7c6f3b858900d01e5b6"}
{"level":"debug","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f8bec79f2432774cdf78cbfd5d73b35acb21af97befd7c6f3b858900d01e5b6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f8bec79f2432774cdf78cbfd5d73b35acb21af97befd7c6f3b858900d01e5b6"}
{"level":"debug","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f8bec79f2432774cdf78cbfd5d73b35acb21af97befd7c6f3b858900d01e5b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:50:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:50:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f8bec79f2432774cdf78cbfd5d73b35acb21af97befd7c6f3b858900d01e5b6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f8bec79f2432774cdf78cbfd5d73b35acb21af97befd7c6f3b858900d01e5b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f8bec79f2432774cdf78cbfd5d73b35acb21af97befd7c6f3b858900d01e5b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca89911e30b10b25605572763347425f5dbe8c1334120218948acd7f72710f85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:50:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:50:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f8bec79f2432774cdf78cbfd5d73b35acb21af97befd7c6f3b858900d01e5b6"}
{"level":"info","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca89911e30b10b25605572763347425f5dbe8c1334120218948acd7f72710f85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca89911e30b10b25605572763347425f5dbe8c1334120218948acd7f72710f85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:50:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:50:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca89911e30b10b25605572763347425f5dbe8c1334120218948acd7f72710f85"}
{"level":"info","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca89911e30b10b25605572763347425f5dbe8c1334120218948acd7f72710f85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca89911e30b10b25605572763347425f5dbe8c1334120218948acd7f72710f85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:50:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:50:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ca89911e30b10b25605572763347425f5dbe8c1334120218948acd7f72710f85","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ca89911e30b10b25605572763347425f5dbe8c1334120218948acd7f72710f85\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca89911e30b10b25605572763347425f5dbe8c1334120218948acd7f72710f85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca89911e30b10b25605572763347425f5dbe8c1334120218948acd7f72710f85","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca89911e30b10b25605572763347425f5dbe8c1334120218948acd7f72710f85"}
{"level":"info","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca89911e30b10b25605572763347425f5dbe8c1334120218948acd7f72710f85"}
{"level":"debug","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb53190628a4d4f55d08fd8d76f1b07d7300d11847dbc3eccfb78db07e82a039","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:50:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:50:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb53190628a4d4f55d08fd8d76f1b07d7300d11847dbc3eccfb78db07e82a039","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb53190628a4d4f55d08fd8d76f1b07d7300d11847dbc3eccfb78db07e82a039","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb53190628a4d4f55d08fd8d76f1b07d7300d11847dbc3eccfb78db07e82a039"}
{"level":"debug","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb53190628a4d4f55d08fd8d76f1b07d7300d11847dbc3eccfb78db07e82a039","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca89911e30b10b25605572763347425f5dbe8c1334120218948acd7f72710f85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:50:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:50:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ca89911e30b10b25605572763347425f5dbe8c1334120218948acd7f72710f85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca89911e30b10b25605572763347425f5dbe8c1334120218948acd7f72710f85","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb53190628a4d4f55d08fd8d76f1b07d7300d11847dbc3eccfb78db07e82a039"}
{"level":"debug","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca89911e30b10b25605572763347425f5dbe8c1334120218948acd7f72710f85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:50:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:50:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca89911e30b10b25605572763347425f5dbe8c1334120218948acd7f72710f85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb53190628a4d4f55d08fd8d76f1b07d7300d11847dbc3eccfb78db07e82a039","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:50:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:50:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bb53190628a4d4f55d08fd8d76f1b07d7300d11847dbc3eccfb78db07e82a039"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca89911e30b10b25605572763347425f5dbe8c1334120218948acd7f72710f85"}
{"level":"info","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb53190628a4d4f55d08fd8d76f1b07d7300d11847dbc3eccfb78db07e82a039","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca89911e30b10b25605572763347425f5dbe8c1334120218948acd7f72710f85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb53190628a4d4f55d08fd8d76f1b07d7300d11847dbc3eccfb78db07e82a039","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca89911e30b10b25605572763347425f5dbe8c1334120218948acd7f72710f85"}
{"level":"debug","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca89911e30b10b25605572763347425f5dbe8c1334120218948acd7f72710f85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:50:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:50:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ca89911e30b10b25605572763347425f5dbe8c1334120218948acd7f72710f85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb53190628a4d4f55d08fd8d76f1b07d7300d11847dbc3eccfb78db07e82a039"}
{"level":"info","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca89911e30b10b25605572763347425f5dbe8c1334120218948acd7f72710f85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca89911e30b10b25605572763347425f5dbe8c1334120218948acd7f72710f85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:50:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:50:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca89911e30b10b25605572763347425f5dbe8c1334120218948acd7f72710f85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca89911e30b10b25605572763347425f5dbe8c1334120218948acd7f72710f85","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca89911e30b10b25605572763347425f5dbe8c1334120218948acd7f72710f85"}
{"level":"debug","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca89911e30b10b25605572763347425f5dbe8c1334120218948acd7f72710f85","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca89911e30b10b25605572763347425f5dbe8c1334120218948acd7f72710f85"}
{"level":"debug","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca89911e30b10b25605572763347425f5dbe8c1334120218948acd7f72710f85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:50:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:50:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ca89911e30b10b25605572763347425f5dbe8c1334120218948acd7f72710f85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca89911e30b10b25605572763347425f5dbe8c1334120218948acd7f72710f85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca89911e30b10b25605572763347425f5dbe8c1334120218948acd7f72710f85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:50:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:50:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca89911e30b10b25605572763347425f5dbe8c1334120218948acd7f72710f85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca89911e30b10b25605572763347425f5dbe8c1334120218948acd7f72710f85","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca89911e30b10b25605572763347425f5dbe8c1334120218948acd7f72710f85"}
{"level":"debug","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca89911e30b10b25605572763347425f5dbe8c1334120218948acd7f72710f85","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca89911e30b10b25605572763347425f5dbe8c1334120218948acd7f72710f85"}
{"level":"debug","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca89911e30b10b25605572763347425f5dbe8c1334120218948acd7f72710f85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:50:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:50:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ca89911e30b10b25605572763347425f5dbe8c1334120218948acd7f72710f85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca89911e30b10b25605572763347425f5dbe8c1334120218948acd7f72710f85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca89911e30b10b25605572763347425f5dbe8c1334120218948acd7f72710f85","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca89911e30b10b25605572763347425f5dbe8c1334120218948acd7f72710f85"}
{"level":"info","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6858b9a768f949668f2d87dd935034e889217d5d1dc89aa049909d9b99c425c7"}
{"level":"info","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6fa4d631ea23ce33cf2f47b22fa4b349d345301dd245b451ccbbddd69b7cfd95"}
{"level":"info","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3a713c65ada16be0d0ae31bafc29f1e8f63cabe37bea4a24c71dd532a23893e3"}
{"level":"info","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/35aff3d818fa66871c7f0afa0bdc15d2c48ba11545d5018cc16ec7e9d03ddcdc"}
{"level":"info","ts":"2026-07-14T11:50:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1194fa06755b015ac37b062e29cec37864b855bf631d747032a312657adb33da"}
{"level":"info","ts":"2026-07-14T11:50:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2820e93b0626cb9190cc24818b3129a8eda4fbc723cacd082f91fad7f6628e2a"}
{"level":"info","ts":"2026-07-14T11:50:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3f92f451cd52fff1b53c9c514688b8392538fcd7598351e7df099fbf4ad94975"}
{"level":"info","ts":"2026-07-14T11:50:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f2f9bf91b582456f3910b80bac41e71045cbfb5c69031bd79d2f8641d1552491"}
{"level":"debug","ts":"2026-07-14T11:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2d367f921746914383df7cc861c34f0e76aa2bc40afad1fbb67499e43434d56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:51:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:51:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2d367f921746914383df7cc861c34f0e76aa2bc40afad1fbb67499e43434d56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2d367f921746914383df7cc861c34f0e76aa2bc40afad1fbb67499e43434d56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2d367f921746914383df7cc861c34f0e76aa2bc40afad1fbb67499e43434d56","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2d367f921746914383df7cc861c34f0e76aa2bc40afad1fbb67499e43434d56"}
{"level":"debug","ts":"2026-07-14T11:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2d367f921746914383df7cc861c34f0e76aa2bc40afad1fbb67499e43434d56","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2d367f921746914383df7cc861c34f0e76aa2bc40afad1fbb67499e43434d56"}
{"level":"debug","ts":"2026-07-14T11:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2d367f921746914383df7cc861c34f0e76aa2bc40afad1fbb67499e43434d56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:51:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:51:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a2d367f921746914383df7cc861c34f0e76aa2bc40afad1fbb67499e43434d56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2d367f921746914383df7cc861c34f0e76aa2bc40afad1fbb67499e43434d56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2d367f921746914383df7cc861c34f0e76aa2bc40afad1fbb67499e43434d56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:51:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:51:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2d367f921746914383df7cc861c34f0e76aa2bc40afad1fbb67499e43434d56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2d367f921746914383df7cc861c34f0e76aa2bc40afad1fbb67499e43434d56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2d367f921746914383df7cc861c34f0e76aa2bc40afad1fbb67499e43434d56","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2d367f921746914383df7cc861c34f0e76aa2bc40afad1fbb67499e43434d56"}
{"level":"debug","ts":"2026-07-14T11:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2d367f921746914383df7cc861c34f0e76aa2bc40afad1fbb67499e43434d56","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2d367f921746914383df7cc861c34f0e76aa2bc40afad1fbb67499e43434d56"}
{"level":"debug","ts":"2026-07-14T11:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2d367f921746914383df7cc861c34f0e76aa2bc40afad1fbb67499e43434d56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:51:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:51:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a2d367f921746914383df7cc861c34f0e76aa2bc40afad1fbb67499e43434d56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2d367f921746914383df7cc861c34f0e76aa2bc40afad1fbb67499e43434d56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2d367f921746914383df7cc861c34f0e76aa2bc40afad1fbb67499e43434d56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:51:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:51:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2d367f921746914383df7cc861c34f0e76aa2bc40afad1fbb67499e43434d56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2d367f921746914383df7cc861c34f0e76aa2bc40afad1fbb67499e43434d56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2d367f921746914383df7cc861c34f0e76aa2bc40afad1fbb67499e43434d56","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2d367f921746914383df7cc861c34f0e76aa2bc40afad1fbb67499e43434d56"}
{"level":"debug","ts":"2026-07-14T11:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2d367f921746914383df7cc861c34f0e76aa2bc40afad1fbb67499e43434d56","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2d367f921746914383df7cc861c34f0e76aa2bc40afad1fbb67499e43434d56"}
{"level":"debug","ts":"2026-07-14T11:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2d367f921746914383df7cc861c34f0e76aa2bc40afad1fbb67499e43434d56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:51:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:51:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a2d367f921746914383df7cc861c34f0e76aa2bc40afad1fbb67499e43434d56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2d367f921746914383df7cc861c34f0e76aa2bc40afad1fbb67499e43434d56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2d367f921746914383df7cc861c34f0e76aa2bc40afad1fbb67499e43434d56","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2d367f921746914383df7cc861c34f0e76aa2bc40afad1fbb67499e43434d56"}
{"level":"debug","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddc17b078bd6ff2e7eb85b3a7e1da99613b2aedec525fb7afa3ed4da73cdef65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:51:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:51:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddc17b078bd6ff2e7eb85b3a7e1da99613b2aedec525fb7afa3ed4da73cdef65"}
{"level":"info","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddc17b078bd6ff2e7eb85b3a7e1da99613b2aedec525fb7afa3ed4da73cdef65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddc17b078bd6ff2e7eb85b3a7e1da99613b2aedec525fb7afa3ed4da73cdef65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:51:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:51:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ddc17b078bd6ff2e7eb85b3a7e1da99613b2aedec525fb7afa3ed4da73cdef65"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddc17b078bd6ff2e7eb85b3a7e1da99613b2aedec525fb7afa3ed4da73cdef65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddc17b078bd6ff2e7eb85b3a7e1da99613b2aedec525fb7afa3ed4da73cdef65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:51:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:51:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddc17b078bd6ff2e7eb85b3a7e1da99613b2aedec525fb7afa3ed4da73cdef65"}
{"level":"error","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ddc17b078bd6ff2e7eb85b3a7e1da99613b2aedec525fb7afa3ed4da73cdef65","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ddc17b078bd6ff2e7eb85b3a7e1da99613b2aedec525fb7afa3ed4da73cdef65\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddc17b078bd6ff2e7eb85b3a7e1da99613b2aedec525fb7afa3ed4da73cdef65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:51:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:51:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddc17b078bd6ff2e7eb85b3a7e1da99613b2aedec525fb7afa3ed4da73cdef65"}
{"level":"info","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddc17b078bd6ff2e7eb85b3a7e1da99613b2aedec525fb7afa3ed4da73cdef65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ddc17b078bd6ff2e7eb85b3a7e1da99613b2aedec525fb7afa3ed4da73cdef65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddc17b078bd6ff2e7eb85b3a7e1da99613b2aedec525fb7afa3ed4da73cdef65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:51:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:51:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ddc17b078bd6ff2e7eb85b3a7e1da99613b2aedec525fb7afa3ed4da73cdef65"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddc17b078bd6ff2e7eb85b3a7e1da99613b2aedec525fb7afa3ed4da73cdef65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67a02caf7114fd5dcc82a9db22efdab0388444c986e6bfcea91c31eb50ddeb20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:51:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:51:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddc17b078bd6ff2e7eb85b3a7e1da99613b2aedec525fb7afa3ed4da73cdef65"}
{"level":"info","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67a02caf7114fd5dcc82a9db22efdab0388444c986e6bfcea91c31eb50ddeb20","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ddc17b078bd6ff2e7eb85b3a7e1da99613b2aedec525fb7afa3ed4da73cdef65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67a02caf7114fd5dcc82a9db22efdab0388444c986e6bfcea91c31eb50ddeb20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:51:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:51:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67a02caf7114fd5dcc82a9db22efdab0388444c986e6bfcea91c31eb50ddeb20"}
{"level":"info","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67a02caf7114fd5dcc82a9db22efdab0388444c986e6bfcea91c31eb50ddeb20","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67a02caf7114fd5dcc82a9db22efdab0388444c986e6bfcea91c31eb50ddeb20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:51:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:51:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67a02caf7114fd5dcc82a9db22efdab0388444c986e6bfcea91c31eb50ddeb20"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"67a02caf7114fd5dcc82a9db22efdab0388444c986e6bfcea91c31eb50ddeb20","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"67a02caf7114fd5dcc82a9db22efdab0388444c986e6bfcea91c31eb50ddeb20\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67a02caf7114fd5dcc82a9db22efdab0388444c986e6bfcea91c31eb50ddeb20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:51:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:51:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67a02caf7114fd5dcc82a9db22efdab0388444c986e6bfcea91c31eb50ddeb20"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddc17b078bd6ff2e7eb85b3a7e1da99613b2aedec525fb7afa3ed4da73cdef65"}
{"level":"info","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67a02caf7114fd5dcc82a9db22efdab0388444c986e6bfcea91c31eb50ddeb20","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67a02caf7114fd5dcc82a9db22efdab0388444c986e6bfcea91c31eb50ddeb20","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67a02caf7114fd5dcc82a9db22efdab0388444c986e6bfcea91c31eb50ddeb20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:51:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:51:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67a02caf7114fd5dcc82a9db22efdab0388444c986e6bfcea91c31eb50ddeb20","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67a02caf7114fd5dcc82a9db22efdab0388444c986e6bfcea91c31eb50ddeb20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:51:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:51:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67a02caf7114fd5dcc82a9db22efdab0388444c986e6bfcea91c31eb50ddeb20"}
{"level":"error","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"67a02caf7114fd5dcc82a9db22efdab0388444c986e6bfcea91c31eb50ddeb20","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"67a02caf7114fd5dcc82a9db22efdab0388444c986e6bfcea91c31eb50ddeb20\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67a02caf7114fd5dcc82a9db22efdab0388444c986e6bfcea91c31eb50ddeb20","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67a02caf7114fd5dcc82a9db22efdab0388444c986e6bfcea91c31eb50ddeb20","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67a02caf7114fd5dcc82a9db22efdab0388444c986e6bfcea91c31eb50ddeb20"}
{"level":"debug","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67a02caf7114fd5dcc82a9db22efdab0388444c986e6bfcea91c31eb50ddeb20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:51:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:51:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67a02caf7114fd5dcc82a9db22efdab0388444c986e6bfcea91c31eb50ddeb20"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67a02caf7114fd5dcc82a9db22efdab0388444c986e6bfcea91c31eb50ddeb20","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67a02caf7114fd5dcc82a9db22efdab0388444c986e6bfcea91c31eb50ddeb20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:51:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:51:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67a02caf7114fd5dcc82a9db22efdab0388444c986e6bfcea91c31eb50ddeb20","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67a02caf7114fd5dcc82a9db22efdab0388444c986e6bfcea91c31eb50ddeb20","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50a80b9138f4eb7c59c2fe3d7fa2aac65b0abcfba00a3c42596ce24f620441ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:51:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:51:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67a02caf7114fd5dcc82a9db22efdab0388444c986e6bfcea91c31eb50ddeb20"}
{"level":"info","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50a80b9138f4eb7c59c2fe3d7fa2aac65b0abcfba00a3c42596ce24f620441ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67a02caf7114fd5dcc82a9db22efdab0388444c986e6bfcea91c31eb50ddeb20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:51:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:51:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67a02caf7114fd5dcc82a9db22efdab0388444c986e6bfcea91c31eb50ddeb20"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50a80b9138f4eb7c59c2fe3d7fa2aac65b0abcfba00a3c42596ce24f620441ab"}
{"level":"info","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67a02caf7114fd5dcc82a9db22efdab0388444c986e6bfcea91c31eb50ddeb20","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50a80b9138f4eb7c59c2fe3d7fa2aac65b0abcfba00a3c42596ce24f620441ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:51:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:51:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["50a80b9138f4eb7c59c2fe3d7fa2aac65b0abcfba00a3c42596ce24f620441ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67a02caf7114fd5dcc82a9db22efdab0388444c986e6bfcea91c31eb50ddeb20"}
{"level":"info","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50a80b9138f4eb7c59c2fe3d7fa2aac65b0abcfba00a3c42596ce24f620441ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67a02caf7114fd5dcc82a9db22efdab0388444c986e6bfcea91c31eb50ddeb20","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50a80b9138f4eb7c59c2fe3d7fa2aac65b0abcfba00a3c42596ce24f620441ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:51:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:51:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50a80b9138f4eb7c59c2fe3d7fa2aac65b0abcfba00a3c42596ce24f620441ab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50a80b9138f4eb7c59c2fe3d7fa2aac65b0abcfba00a3c42596ce24f620441ab"}
{"level":"debug","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50a80b9138f4eb7c59c2fe3d7fa2aac65b0abcfba00a3c42596ce24f620441ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:51:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:51:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["50a80b9138f4eb7c59c2fe3d7fa2aac65b0abcfba00a3c42596ce24f620441ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50a80b9138f4eb7c59c2fe3d7fa2aac65b0abcfba00a3c42596ce24f620441ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50a80b9138f4eb7c59c2fe3d7fa2aac65b0abcfba00a3c42596ce24f620441ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:51:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:51:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["50a80b9138f4eb7c59c2fe3d7fa2aac65b0abcfba00a3c42596ce24f620441ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67a02caf7114fd5dcc82a9db22efdab0388444c986e6bfcea91c31eb50ddeb20"}
{"level":"error","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"50a80b9138f4eb7c59c2fe3d7fa2aac65b0abcfba00a3c42596ce24f620441ab","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"50a80b9138f4eb7c59c2fe3d7fa2aac65b0abcfba00a3c42596ce24f620441ab\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50a80b9138f4eb7c59c2fe3d7fa2aac65b0abcfba00a3c42596ce24f620441ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:51:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:51:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50a80b9138f4eb7c59c2fe3d7fa2aac65b0abcfba00a3c42596ce24f620441ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50a80b9138f4eb7c59c2fe3d7fa2aac65b0abcfba00a3c42596ce24f620441ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:51:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:51:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50a80b9138f4eb7c59c2fe3d7fa2aac65b0abcfba00a3c42596ce24f620441ab"}
{"level":"error","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"50a80b9138f4eb7c59c2fe3d7fa2aac65b0abcfba00a3c42596ce24f620441ab","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"50a80b9138f4eb7c59c2fe3d7fa2aac65b0abcfba00a3c42596ce24f620441ab\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50a80b9138f4eb7c59c2fe3d7fa2aac65b0abcfba00a3c42596ce24f620441ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50a80b9138f4eb7c59c2fe3d7fa2aac65b0abcfba00a3c42596ce24f620441ab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50a80b9138f4eb7c59c2fe3d7fa2aac65b0abcfba00a3c42596ce24f620441ab"}
{"level":"debug","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50a80b9138f4eb7c59c2fe3d7fa2aac65b0abcfba00a3c42596ce24f620441ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:51:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:51:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["50a80b9138f4eb7c59c2fe3d7fa2aac65b0abcfba00a3c42596ce24f620441ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50a80b9138f4eb7c59c2fe3d7fa2aac65b0abcfba00a3c42596ce24f620441ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"720d5ef970419c7204236a61b3ed680578b6b847eb93c868cccc3fac538c1d75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:51:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:51:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/720d5ef970419c7204236a61b3ed680578b6b847eb93c868cccc3fac538c1d75"}
{"level":"info","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"720d5ef970419c7204236a61b3ed680578b6b847eb93c868cccc3fac538c1d75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50a80b9138f4eb7c59c2fe3d7fa2aac65b0abcfba00a3c42596ce24f620441ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:51:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:51:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50a80b9138f4eb7c59c2fe3d7fa2aac65b0abcfba00a3c42596ce24f620441ab"}
{"level":"info","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50a80b9138f4eb7c59c2fe3d7fa2aac65b0abcfba00a3c42596ce24f620441ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"720d5ef970419c7204236a61b3ed680578b6b847eb93c868cccc3fac538c1d75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50a80b9138f4eb7c59c2fe3d7fa2aac65b0abcfba00a3c42596ce24f620441ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:51:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:51:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["50a80b9138f4eb7c59c2fe3d7fa2aac65b0abcfba00a3c42596ce24f620441ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50a80b9138f4eb7c59c2fe3d7fa2aac65b0abcfba00a3c42596ce24f620441ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"720d5ef970419c7204236a61b3ed680578b6b847eb93c868cccc3fac538c1d75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50a80b9138f4eb7c59c2fe3d7fa2aac65b0abcfba00a3c42596ce24f620441ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:51:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:51:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["50a80b9138f4eb7c59c2fe3d7fa2aac65b0abcfba00a3c42596ce24f620441ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/720d5ef970419c7204236a61b3ed680578b6b847eb93c868cccc3fac538c1d75"}
{"level":"error","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"50a80b9138f4eb7c59c2fe3d7fa2aac65b0abcfba00a3c42596ce24f620441ab","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"50a80b9138f4eb7c59c2fe3d7fa2aac65b0abcfba00a3c42596ce24f620441ab\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50a80b9138f4eb7c59c2fe3d7fa2aac65b0abcfba00a3c42596ce24f620441ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:51:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:51:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50a80b9138f4eb7c59c2fe3d7fa2aac65b0abcfba00a3c42596ce24f620441ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"720d5ef970419c7204236a61b3ed680578b6b847eb93c868cccc3fac538c1d75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:51:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:51:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["720d5ef970419c7204236a61b3ed680578b6b847eb93c868cccc3fac538c1d75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50a80b9138f4eb7c59c2fe3d7fa2aac65b0abcfba00a3c42596ce24f620441ab"}
{"level":"info","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"720d5ef970419c7204236a61b3ed680578b6b847eb93c868cccc3fac538c1d75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50a80b9138f4eb7c59c2fe3d7fa2aac65b0abcfba00a3c42596ce24f620441ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"720d5ef970419c7204236a61b3ed680578b6b847eb93c868cccc3fac538c1d75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc2d0e6598142f4c57b463ffd1801ff3ad88befb008dede6c60d8d0a5782f194","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:51:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:51:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50a80b9138f4eb7c59c2fe3d7fa2aac65b0abcfba00a3c42596ce24f620441ab"}
{"level":"info","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc2d0e6598142f4c57b463ffd1801ff3ad88befb008dede6c60d8d0a5782f194","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc2d0e6598142f4c57b463ffd1801ff3ad88befb008dede6c60d8d0a5782f194","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50a80b9138f4eb7c59c2fe3d7fa2aac65b0abcfba00a3c42596ce24f620441ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:51:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:51:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["50a80b9138f4eb7c59c2fe3d7fa2aac65b0abcfba00a3c42596ce24f620441ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/720d5ef970419c7204236a61b3ed680578b6b847eb93c868cccc3fac538c1d75"}
{"level":"info","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50a80b9138f4eb7c59c2fe3d7fa2aac65b0abcfba00a3c42596ce24f620441ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc2d0e6598142f4c57b463ffd1801ff3ad88befb008dede6c60d8d0a5782f194","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:51:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:51:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc2d0e6598142f4c57b463ffd1801ff3ad88befb008dede6c60d8d0a5782f194","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50a80b9138f4eb7c59c2fe3d7fa2aac65b0abcfba00a3c42596ce24f620441ab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc2d0e6598142f4c57b463ffd1801ff3ad88befb008dede6c60d8d0a5782f194"}
{"level":"debug","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc2d0e6598142f4c57b463ffd1801ff3ad88befb008dede6c60d8d0a5782f194","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:51:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:51:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc2d0e6598142f4c57b463ffd1801ff3ad88befb008dede6c60d8d0a5782f194"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc2d0e6598142f4c57b463ffd1801ff3ad88befb008dede6c60d8d0a5782f194","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc2d0e6598142f4c57b463ffd1801ff3ad88befb008dede6c60d8d0a5782f194","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50a80b9138f4eb7c59c2fe3d7fa2aac65b0abcfba00a3c42596ce24f620441ab"}
{"level":"debug","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc2d0e6598142f4c57b463ffd1801ff3ad88befb008dede6c60d8d0a5782f194","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:51:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:51:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc2d0e6598142f4c57b463ffd1801ff3ad88befb008dede6c60d8d0a5782f194","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc2d0e6598142f4c57b463ffd1801ff3ad88befb008dede6c60d8d0a5782f194","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc2d0e6598142f4c57b463ffd1801ff3ad88befb008dede6c60d8d0a5782f194","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc2d0e6598142f4c57b463ffd1801ff3ad88befb008dede6c60d8d0a5782f194"}
{"level":"info","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc2d0e6598142f4c57b463ffd1801ff3ad88befb008dede6c60d8d0a5782f194"}
{"level":"debug","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc2d0e6598142f4c57b463ffd1801ff3ad88befb008dede6c60d8d0a5782f194","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:51:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:51:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc2d0e6598142f4c57b463ffd1801ff3ad88befb008dede6c60d8d0a5782f194"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc2d0e6598142f4c57b463ffd1801ff3ad88befb008dede6c60d8d0a5782f194","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc2d0e6598142f4c57b463ffd1801ff3ad88befb008dede6c60d8d0a5782f194","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc2d0e6598142f4c57b463ffd1801ff3ad88befb008dede6c60d8d0a5782f194"}
{"level":"debug","ts":"2026-07-14T11:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb133310f52cdd36676b4baf8a10d76277f7eb3d78650faf551d954894fa8518","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:51:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:51:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb133310f52cdd36676b4baf8a10d76277f7eb3d78650faf551d954894fa8518","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb133310f52cdd36676b4baf8a10d76277f7eb3d78650faf551d954894fa8518","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb133310f52cdd36676b4baf8a10d76277f7eb3d78650faf551d954894fa8518"}
{"level":"debug","ts":"2026-07-14T11:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb133310f52cdd36676b4baf8a10d76277f7eb3d78650faf551d954894fa8518","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb133310f52cdd36676b4baf8a10d76277f7eb3d78650faf551d954894fa8518"}
{"level":"debug","ts":"2026-07-14T11:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb133310f52cdd36676b4baf8a10d76277f7eb3d78650faf551d954894fa8518","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:51:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:51:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bb133310f52cdd36676b4baf8a10d76277f7eb3d78650faf551d954894fa8518"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb133310f52cdd36676b4baf8a10d76277f7eb3d78650faf551d954894fa8518","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb133310f52cdd36676b4baf8a10d76277f7eb3d78650faf551d954894fa8518","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb133310f52cdd36676b4baf8a10d76277f7eb3d78650faf551d954894fa8518"}
{"level":"debug","ts":"2026-07-14T11:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"538c1463be0b38acb267bbc1fe0bae59718d514cc70b8c96faff855cd5ca94de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:51:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:51:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"538c1463be0b38acb267bbc1fe0bae59718d514cc70b8c96faff855cd5ca94de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"538c1463be0b38acb267bbc1fe0bae59718d514cc70b8c96faff855cd5ca94de","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/538c1463be0b38acb267bbc1fe0bae59718d514cc70b8c96faff855cd5ca94de"}
{"level":"debug","ts":"2026-07-14T11:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"538c1463be0b38acb267bbc1fe0bae59718d514cc70b8c96faff855cd5ca94de","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/538c1463be0b38acb267bbc1fe0bae59718d514cc70b8c96faff855cd5ca94de"}
{"level":"debug","ts":"2026-07-14T11:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"538c1463be0b38acb267bbc1fe0bae59718d514cc70b8c96faff855cd5ca94de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:51:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:51:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["538c1463be0b38acb267bbc1fe0bae59718d514cc70b8c96faff855cd5ca94de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"538c1463be0b38acb267bbc1fe0bae59718d514cc70b8c96faff855cd5ca94de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"538c1463be0b38acb267bbc1fe0bae59718d514cc70b8c96faff855cd5ca94de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:51:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:51:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"538c1463be0b38acb267bbc1fe0bae59718d514cc70b8c96faff855cd5ca94de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"538c1463be0b38acb267bbc1fe0bae59718d514cc70b8c96faff855cd5ca94de","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/538c1463be0b38acb267bbc1fe0bae59718d514cc70b8c96faff855cd5ca94de"}
{"level":"debug","ts":"2026-07-14T11:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"538c1463be0b38acb267bbc1fe0bae59718d514cc70b8c96faff855cd5ca94de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"538c1463be0b38acb267bbc1fe0bae59718d514cc70b8c96faff855cd5ca94de","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/538c1463be0b38acb267bbc1fe0bae59718d514cc70b8c96faff855cd5ca94de"}
{"level":"debug","ts":"2026-07-14T11:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"538c1463be0b38acb267bbc1fe0bae59718d514cc70b8c96faff855cd5ca94de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:51:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:51:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["538c1463be0b38acb267bbc1fe0bae59718d514cc70b8c96faff855cd5ca94de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"538c1463be0b38acb267bbc1fe0bae59718d514cc70b8c96faff855cd5ca94de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"538c1463be0b38acb267bbc1fe0bae59718d514cc70b8c96faff855cd5ca94de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:51:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:51:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"538c1463be0b38acb267bbc1fe0bae59718d514cc70b8c96faff855cd5ca94de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"538c1463be0b38acb267bbc1fe0bae59718d514cc70b8c96faff855cd5ca94de","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/538c1463be0b38acb267bbc1fe0bae59718d514cc70b8c96faff855cd5ca94de"}
{"level":"debug","ts":"2026-07-14T11:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"538c1463be0b38acb267bbc1fe0bae59718d514cc70b8c96faff855cd5ca94de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"538c1463be0b38acb267bbc1fe0bae59718d514cc70b8c96faff855cd5ca94de","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/538c1463be0b38acb267bbc1fe0bae59718d514cc70b8c96faff855cd5ca94de"}
{"level":"debug","ts":"2026-07-14T11:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"538c1463be0b38acb267bbc1fe0bae59718d514cc70b8c96faff855cd5ca94de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:51:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:51:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["538c1463be0b38acb267bbc1fe0bae59718d514cc70b8c96faff855cd5ca94de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"538c1463be0b38acb267bbc1fe0bae59718d514cc70b8c96faff855cd5ca94de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"538c1463be0b38acb267bbc1fe0bae59718d514cc70b8c96faff855cd5ca94de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:51:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:51:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"538c1463be0b38acb267bbc1fe0bae59718d514cc70b8c96faff855cd5ca94de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"538c1463be0b38acb267bbc1fe0bae59718d514cc70b8c96faff855cd5ca94de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"538c1463be0b38acb267bbc1fe0bae59718d514cc70b8c96faff855cd5ca94de","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/538c1463be0b38acb267bbc1fe0bae59718d514cc70b8c96faff855cd5ca94de"}
{"level":"debug","ts":"2026-07-14T11:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"538c1463be0b38acb267bbc1fe0bae59718d514cc70b8c96faff855cd5ca94de","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/538c1463be0b38acb267bbc1fe0bae59718d514cc70b8c96faff855cd5ca94de"}
{"level":"debug","ts":"2026-07-14T11:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"538c1463be0b38acb267bbc1fe0bae59718d514cc70b8c96faff855cd5ca94de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:51:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:51:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["538c1463be0b38acb267bbc1fe0bae59718d514cc70b8c96faff855cd5ca94de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"538c1463be0b38acb267bbc1fe0bae59718d514cc70b8c96faff855cd5ca94de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"538c1463be0b38acb267bbc1fe0bae59718d514cc70b8c96faff855cd5ca94de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:51:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:51:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"538c1463be0b38acb267bbc1fe0bae59718d514cc70b8c96faff855cd5ca94de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"538c1463be0b38acb267bbc1fe0bae59718d514cc70b8c96faff855cd5ca94de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"538c1463be0b38acb267bbc1fe0bae59718d514cc70b8c96faff855cd5ca94de","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/538c1463be0b38acb267bbc1fe0bae59718d514cc70b8c96faff855cd5ca94de"}
{"level":"debug","ts":"2026-07-14T11:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"538c1463be0b38acb267bbc1fe0bae59718d514cc70b8c96faff855cd5ca94de","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/538c1463be0b38acb267bbc1fe0bae59718d514cc70b8c96faff855cd5ca94de"}
{"level":"debug","ts":"2026-07-14T11:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"538c1463be0b38acb267bbc1fe0bae59718d514cc70b8c96faff855cd5ca94de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:51:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:51:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["538c1463be0b38acb267bbc1fe0bae59718d514cc70b8c96faff855cd5ca94de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"538c1463be0b38acb267bbc1fe0bae59718d514cc70b8c96faff855cd5ca94de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"538c1463be0b38acb267bbc1fe0bae59718d514cc70b8c96faff855cd5ca94de","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/538c1463be0b38acb267bbc1fe0bae59718d514cc70b8c96faff855cd5ca94de"}
{"level":"debug","ts":"2026-07-14T11:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7b052134374a726612de2cac74d2cc38b807d718997176cb904fca41535d1d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:51:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:51:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7b052134374a726612de2cac74d2cc38b807d718997176cb904fca41535d1d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7b052134374a726612de2cac74d2cc38b807d718997176cb904fca41535d1d8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7b052134374a726612de2cac74d2cc38b807d718997176cb904fca41535d1d8"}
{"level":"debug","ts":"2026-07-14T11:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7b052134374a726612de2cac74d2cc38b807d718997176cb904fca41535d1d8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7b052134374a726612de2cac74d2cc38b807d718997176cb904fca41535d1d8"}
{"level":"debug","ts":"2026-07-14T11:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7b052134374a726612de2cac74d2cc38b807d718997176cb904fca41535d1d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:51:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:51:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b7b052134374a726612de2cac74d2cc38b807d718997176cb904fca41535d1d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7b052134374a726612de2cac74d2cc38b807d718997176cb904fca41535d1d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7b052134374a726612de2cac74d2cc38b807d718997176cb904fca41535d1d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:51:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:51:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7b052134374a726612de2cac74d2cc38b807d718997176cb904fca41535d1d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7b052134374a726612de2cac74d2cc38b807d718997176cb904fca41535d1d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7b052134374a726612de2cac74d2cc38b807d718997176cb904fca41535d1d8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7b052134374a726612de2cac74d2cc38b807d718997176cb904fca41535d1d8"}
{"level":"debug","ts":"2026-07-14T11:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7b052134374a726612de2cac74d2cc38b807d718997176cb904fca41535d1d8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7b052134374a726612de2cac74d2cc38b807d718997176cb904fca41535d1d8"}
{"level":"debug","ts":"2026-07-14T11:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7b052134374a726612de2cac74d2cc38b807d718997176cb904fca41535d1d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:51:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:51:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b7b052134374a726612de2cac74d2cc38b807d718997176cb904fca41535d1d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7b052134374a726612de2cac74d2cc38b807d718997176cb904fca41535d1d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7b052134374a726612de2cac74d2cc38b807d718997176cb904fca41535d1d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:51:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:51:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7b052134374a726612de2cac74d2cc38b807d718997176cb904fca41535d1d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7b052134374a726612de2cac74d2cc38b807d718997176cb904fca41535d1d8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7b052134374a726612de2cac74d2cc38b807d718997176cb904fca41535d1d8"}
{"level":"debug","ts":"2026-07-14T11:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7b052134374a726612de2cac74d2cc38b807d718997176cb904fca41535d1d8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7b052134374a726612de2cac74d2cc38b807d718997176cb904fca41535d1d8"}
{"level":"debug","ts":"2026-07-14T11:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7b052134374a726612de2cac74d2cc38b807d718997176cb904fca41535d1d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:51:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:51:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b7b052134374a726612de2cac74d2cc38b807d718997176cb904fca41535d1d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7b052134374a726612de2cac74d2cc38b807d718997176cb904fca41535d1d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7b052134374a726612de2cac74d2cc38b807d718997176cb904fca41535d1d8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7b052134374a726612de2cac74d2cc38b807d718997176cb904fca41535d1d8"}
{"level":"debug","ts":"2026-07-14T11:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"720d5ef970419c7204236a61b3ed680578b6b847eb93c868cccc3fac538c1d75","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/720d5ef970419c7204236a61b3ed680578b6b847eb93c868cccc3fac538c1d75"}
{"level":"debug","ts":"2026-07-14T11:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddc17b078bd6ff2e7eb85b3a7e1da99613b2aedec525fb7afa3ed4da73cdef65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:51:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:51:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddc17b078bd6ff2e7eb85b3a7e1da99613b2aedec525fb7afa3ed4da73cdef65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ddc17b078bd6ff2e7eb85b3a7e1da99613b2aedec525fb7afa3ed4da73cdef65","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddc17b078bd6ff2e7eb85b3a7e1da99613b2aedec525fb7afa3ed4da73cdef65"}
{"level":"debug","ts":"2026-07-14T11:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ddc17b078bd6ff2e7eb85b3a7e1da99613b2aedec525fb7afa3ed4da73cdef65","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddc17b078bd6ff2e7eb85b3a7e1da99613b2aedec525fb7afa3ed4da73cdef65"}
{"level":"debug","ts":"2026-07-14T11:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddc17b078bd6ff2e7eb85b3a7e1da99613b2aedec525fb7afa3ed4da73cdef65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:51:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:51:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ddc17b078bd6ff2e7eb85b3a7e1da99613b2aedec525fb7afa3ed4da73cdef65"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddc17b078bd6ff2e7eb85b3a7e1da99613b2aedec525fb7afa3ed4da73cdef65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddc17b078bd6ff2e7eb85b3a7e1da99613b2aedec525fb7afa3ed4da73cdef65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:51:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:51:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddc17b078bd6ff2e7eb85b3a7e1da99613b2aedec525fb7afa3ed4da73cdef65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ddc17b078bd6ff2e7eb85b3a7e1da99613b2aedec525fb7afa3ed4da73cdef65","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddc17b078bd6ff2e7eb85b3a7e1da99613b2aedec525fb7afa3ed4da73cdef65"}
{"level":"debug","ts":"2026-07-14T11:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ddc17b078bd6ff2e7eb85b3a7e1da99613b2aedec525fb7afa3ed4da73cdef65","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddc17b078bd6ff2e7eb85b3a7e1da99613b2aedec525fb7afa3ed4da73cdef65"}
{"level":"debug","ts":"2026-07-14T11:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddc17b078bd6ff2e7eb85b3a7e1da99613b2aedec525fb7afa3ed4da73cdef65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:51:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:51:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ddc17b078bd6ff2e7eb85b3a7e1da99613b2aedec525fb7afa3ed4da73cdef65"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddc17b078bd6ff2e7eb85b3a7e1da99613b2aedec525fb7afa3ed4da73cdef65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d308ea6f182373125f1f87d79ab4fb2c62745b1d19eca518cfdb27b9ffff852","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:51:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:51:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d308ea6f182373125f1f87d79ab4fb2c62745b1d19eca518cfdb27b9ffff852"}
{"level":"info","ts":"2026-07-14T11:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d308ea6f182373125f1f87d79ab4fb2c62745b1d19eca518cfdb27b9ffff852","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddc17b078bd6ff2e7eb85b3a7e1da99613b2aedec525fb7afa3ed4da73cdef65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:51:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:51:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddc17b078bd6ff2e7eb85b3a7e1da99613b2aedec525fb7afa3ed4da73cdef65"}
{"level":"info","ts":"2026-07-14T11:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddc17b078bd6ff2e7eb85b3a7e1da99613b2aedec525fb7afa3ed4da73cdef65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d308ea6f182373125f1f87d79ab4fb2c62745b1d19eca518cfdb27b9ffff852","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddc17b078bd6ff2e7eb85b3a7e1da99613b2aedec525fb7afa3ed4da73cdef65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:51:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:51:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ddc17b078bd6ff2e7eb85b3a7e1da99613b2aedec525fb7afa3ed4da73cdef65"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d308ea6f182373125f1f87d79ab4fb2c62745b1d19eca518cfdb27b9ffff852"}
{"level":"info","ts":"2026-07-14T11:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddc17b078bd6ff2e7eb85b3a7e1da99613b2aedec525fb7afa3ed4da73cdef65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d308ea6f182373125f1f87d79ab4fb2c62745b1d19eca518cfdb27b9ffff852","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:51:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:51:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d308ea6f182373125f1f87d79ab4fb2c62745b1d19eca518cfdb27b9ffff852"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddc17b078bd6ff2e7eb85b3a7e1da99613b2aedec525fb7afa3ed4da73cdef65"}
{"level":"info","ts":"2026-07-14T11:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d308ea6f182373125f1f87d79ab4fb2c62745b1d19eca518cfdb27b9ffff852","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddc17b078bd6ff2e7eb85b3a7e1da99613b2aedec525fb7afa3ed4da73cdef65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:51:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:51:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddc17b078bd6ff2e7eb85b3a7e1da99613b2aedec525fb7afa3ed4da73cdef65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d308ea6f182373125f1f87d79ab4fb2c62745b1d19eca518cfdb27b9ffff852","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca89911e30b10b25605572763347425f5dbe8c1334120218948acd7f72710f85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ddc17b078bd6ff2e7eb85b3a7e1da99613b2aedec525fb7afa3ed4da73cdef65","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddc17b078bd6ff2e7eb85b3a7e1da99613b2aedec525fb7afa3ed4da73cdef65"}
{"level":"debug","ts":"2026-07-14T11:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddc17b078bd6ff2e7eb85b3a7e1da99613b2aedec525fb7afa3ed4da73cdef65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:51:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:51:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ddc17b078bd6ff2e7eb85b3a7e1da99613b2aedec525fb7afa3ed4da73cdef65"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddc17b078bd6ff2e7eb85b3a7e1da99613b2aedec525fb7afa3ed4da73cdef65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ddc17b078bd6ff2e7eb85b3a7e1da99613b2aedec525fb7afa3ed4da73cdef65","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d308ea6f182373125f1f87d79ab4fb2c62745b1d19eca518cfdb27b9ffff852"}
{"level":"info","ts":"2026-07-14T11:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca89911e30b10b25605572763347425f5dbe8c1334120218948acd7f72710f85"}
{"level":"info","ts":"2026-07-14T11:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddc17b078bd6ff2e7eb85b3a7e1da99613b2aedec525fb7afa3ed4da73cdef65"}
{"level":"debug","ts":"2026-07-14T11:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e070f1ad2c2e72cfc483b37a979ea853738ff8ed8bdfbe6aa8764aaa5bf55bc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:51:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:51:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e070f1ad2c2e72cfc483b37a979ea853738ff8ed8bdfbe6aa8764aaa5bf55bc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e070f1ad2c2e72cfc483b37a979ea853738ff8ed8bdfbe6aa8764aaa5bf55bc5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e070f1ad2c2e72cfc483b37a979ea853738ff8ed8bdfbe6aa8764aaa5bf55bc5"}
{"level":"debug","ts":"2026-07-14T11:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e070f1ad2c2e72cfc483b37a979ea853738ff8ed8bdfbe6aa8764aaa5bf55bc5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e070f1ad2c2e72cfc483b37a979ea853738ff8ed8bdfbe6aa8764aaa5bf55bc5"}
{"level":"debug","ts":"2026-07-14T11:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e070f1ad2c2e72cfc483b37a979ea853738ff8ed8bdfbe6aa8764aaa5bf55bc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:51:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:51:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e070f1ad2c2e72cfc483b37a979ea853738ff8ed8bdfbe6aa8764aaa5bf55bc5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e070f1ad2c2e72cfc483b37a979ea853738ff8ed8bdfbe6aa8764aaa5bf55bc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e070f1ad2c2e72cfc483b37a979ea853738ff8ed8bdfbe6aa8764aaa5bf55bc5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e070f1ad2c2e72cfc483b37a979ea853738ff8ed8bdfbe6aa8764aaa5bf55bc5"}
{"level":"debug","ts":"2026-07-14T11:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f8bec79f2432774cdf78cbfd5d73b35acb21af97befd7c6f3b858900d01e5b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:51:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:51:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f8bec79f2432774cdf78cbfd5d73b35acb21af97befd7c6f3b858900d01e5b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f8bec79f2432774cdf78cbfd5d73b35acb21af97befd7c6f3b858900d01e5b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f8bec79f2432774cdf78cbfd5d73b35acb21af97befd7c6f3b858900d01e5b6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f8bec79f2432774cdf78cbfd5d73b35acb21af97befd7c6f3b858900d01e5b6"}
{"level":"debug","ts":"2026-07-14T11:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f8bec79f2432774cdf78cbfd5d73b35acb21af97befd7c6f3b858900d01e5b6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f8bec79f2432774cdf78cbfd5d73b35acb21af97befd7c6f3b858900d01e5b6"}
{"level":"debug","ts":"2026-07-14T11:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f8bec79f2432774cdf78cbfd5d73b35acb21af97befd7c6f3b858900d01e5b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:51:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:51:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f8bec79f2432774cdf78cbfd5d73b35acb21af97befd7c6f3b858900d01e5b6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f8bec79f2432774cdf78cbfd5d73b35acb21af97befd7c6f3b858900d01e5b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f8bec79f2432774cdf78cbfd5d73b35acb21af97befd7c6f3b858900d01e5b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:51:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:51:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f8bec79f2432774cdf78cbfd5d73b35acb21af97befd7c6f3b858900d01e5b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6807a5b34b8dbc16e7dde053f837a160791782f7d8fd4cec0c178abdefc6c4d1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f8bec79f2432774cdf78cbfd5d73b35acb21af97befd7c6f3b858900d01e5b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67a02caf7114fd5dcc82a9db22efdab0388444c986e6bfcea91c31eb50ddeb20","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f8bec79f2432774cdf78cbfd5d73b35acb21af97befd7c6f3b858900d01e5b6"}
{"level":"debug","ts":"2026-07-14T11:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f8bec79f2432774cdf78cbfd5d73b35acb21af97befd7c6f3b858900d01e5b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:51:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:51:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f8bec79f2432774cdf78cbfd5d73b35acb21af97befd7c6f3b858900d01e5b6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f8bec79f2432774cdf78cbfd5d73b35acb21af97befd7c6f3b858900d01e5b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f8bec79f2432774cdf78cbfd5d73b35acb21af97befd7c6f3b858900d01e5b6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6807a5b34b8dbc16e7dde053f837a160791782f7d8fd4cec0c178abdefc6c4d1"}
{"level":"info","ts":"2026-07-14T11:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67a02caf7114fd5dcc82a9db22efdab0388444c986e6bfcea91c31eb50ddeb20"}
{"level":"info","ts":"2026-07-14T11:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f8bec79f2432774cdf78cbfd5d73b35acb21af97befd7c6f3b858900d01e5b6"}
{"level":"debug","ts":"2026-07-14T11:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50a80b9138f4eb7c59c2fe3d7fa2aac65b0abcfba00a3c42596ce24f620441ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:51:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:51:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50a80b9138f4eb7c59c2fe3d7fa2aac65b0abcfba00a3c42596ce24f620441ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50a80b9138f4eb7c59c2fe3d7fa2aac65b0abcfba00a3c42596ce24f620441ab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50a80b9138f4eb7c59c2fe3d7fa2aac65b0abcfba00a3c42596ce24f620441ab"}
{"level":"debug","ts":"2026-07-14T11:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50a80b9138f4eb7c59c2fe3d7fa2aac65b0abcfba00a3c42596ce24f620441ab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50a80b9138f4eb7c59c2fe3d7fa2aac65b0abcfba00a3c42596ce24f620441ab"}
{"level":"debug","ts":"2026-07-14T11:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50a80b9138f4eb7c59c2fe3d7fa2aac65b0abcfba00a3c42596ce24f620441ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:51:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:51:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["50a80b9138f4eb7c59c2fe3d7fa2aac65b0abcfba00a3c42596ce24f620441ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50a80b9138f4eb7c59c2fe3d7fa2aac65b0abcfba00a3c42596ce24f620441ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50a80b9138f4eb7c59c2fe3d7fa2aac65b0abcfba00a3c42596ce24f620441ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:51:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:51:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50a80b9138f4eb7c59c2fe3d7fa2aac65b0abcfba00a3c42596ce24f620441ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50a80b9138f4eb7c59c2fe3d7fa2aac65b0abcfba00a3c42596ce24f620441ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50a80b9138f4eb7c59c2fe3d7fa2aac65b0abcfba00a3c42596ce24f620441ab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50a80b9138f4eb7c59c2fe3d7fa2aac65b0abcfba00a3c42596ce24f620441ab"}
{"level":"debug","ts":"2026-07-14T11:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2d367f921746914383df7cc861c34f0e76aa2bc40afad1fbb67499e43434d56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50a80b9138f4eb7c59c2fe3d7fa2aac65b0abcfba00a3c42596ce24f620441ab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50a80b9138f4eb7c59c2fe3d7fa2aac65b0abcfba00a3c42596ce24f620441ab"}
{"level":"info","ts":"2026-07-14T11:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2d367f921746914383df7cc861c34f0e76aa2bc40afad1fbb67499e43434d56"}
{"level":"debug","ts":"2026-07-14T11:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50a80b9138f4eb7c59c2fe3d7fa2aac65b0abcfba00a3c42596ce24f620441ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:51:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:51:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["50a80b9138f4eb7c59c2fe3d7fa2aac65b0abcfba00a3c42596ce24f620441ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50a80b9138f4eb7c59c2fe3d7fa2aac65b0abcfba00a3c42596ce24f620441ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50a80b9138f4eb7c59c2fe3d7fa2aac65b0abcfba00a3c42596ce24f620441ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:51:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:51:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50a80b9138f4eb7c59c2fe3d7fa2aac65b0abcfba00a3c42596ce24f620441ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50a80b9138f4eb7c59c2fe3d7fa2aac65b0abcfba00a3c42596ce24f620441ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50a80b9138f4eb7c59c2fe3d7fa2aac65b0abcfba00a3c42596ce24f620441ab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50a80b9138f4eb7c59c2fe3d7fa2aac65b0abcfba00a3c42596ce24f620441ab"}
{"level":"debug","ts":"2026-07-14T11:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14818cdce25501620e08bd39a469a9a1dff96c564c7e81e7e9aa3ebadc998110","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50a80b9138f4eb7c59c2fe3d7fa2aac65b0abcfba00a3c42596ce24f620441ab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50a80b9138f4eb7c59c2fe3d7fa2aac65b0abcfba00a3c42596ce24f620441ab"}
{"level":"info","ts":"2026-07-14T11:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14818cdce25501620e08bd39a469a9a1dff96c564c7e81e7e9aa3ebadc998110"}
{"level":"debug","ts":"2026-07-14T11:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50a80b9138f4eb7c59c2fe3d7fa2aac65b0abcfba00a3c42596ce24f620441ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:51:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:51:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["50a80b9138f4eb7c59c2fe3d7fa2aac65b0abcfba00a3c42596ce24f620441ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50a80b9138f4eb7c59c2fe3d7fa2aac65b0abcfba00a3c42596ce24f620441ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50a80b9138f4eb7c59c2fe3d7fa2aac65b0abcfba00a3c42596ce24f620441ab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50a80b9138f4eb7c59c2fe3d7fa2aac65b0abcfba00a3c42596ce24f620441ab"}
{"level":"debug","ts":"2026-07-14T11:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc2d0e6598142f4c57b463ffd1801ff3ad88befb008dede6c60d8d0a5782f194","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc2d0e6598142f4c57b463ffd1801ff3ad88befb008dede6c60d8d0a5782f194"}
{"level":"debug","ts":"2026-07-14T11:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd7ea4d701d4e25db0264932949b154442b1e66def9a019b18ea500d8ecf1b1b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T11:51:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T11:51:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd7ea4d701d4e25db0264932949b154442b1e66def9a019b18ea500d8ecf1b1b"}
{"level":"info","ts":"2026-07-14T11:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd7ea4d701d4e25db0264932949b154442b1e66def9a019b18ea500d8ecf1b1b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd7f1fbc6933dffa0777c81a23ccd7797b727b4788b727485f292e0511d03653","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd7ea4d701d4e25db0264932949b154442b1e66def9a019b18ea500d8ecf1b1b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd7ea4d701d4e25db0264932949b154442b1e66def9a019b18ea500d8ecf1b1b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af8c2e59c857902dcab9205756cba6779323e9728f8c046e66a334e1c319dec1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd7ea4d701d4e25db0264932949b154442b1e66def9a019b18ea500d8ecf1b1b"}
{"level":"debug","ts":"2026-07-14T11:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd7ea4d701d4e25db0264932949b154442b1e66def9a019b18ea500d8ecf1b1b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T11:51:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T11:51:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd7ea4d701d4e25db0264932949b154442b1e66def9a019b18ea500d8ecf1b1b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T11:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd7ea4d701d4e25db0264932949b154442b1e66def9a019b18ea500d8ecf1b1b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02b25c5a20709ba0cc840454a53156c9123503ca13eb0b1e8d27d8bc19527b62","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd7ea4d701d4e25db0264932949b154442b1e66def9a019b18ea500d8ecf1b1b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T11:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ff00153df7f2780e08f9433abf712a9e0ec1d2791f3808a60779a2499e903f3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd7f1fbc6933dffa0777c81a23ccd7797b727b4788b727485f292e0511d03653"}
{"level":"info","ts":"2026-07-14T11:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af8c2e59c857902dcab9205756cba6779323e9728f8c046e66a334e1c319dec1"}
{"level":"debug","ts":"2026-07-14T11:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb133310f52cdd36676b4baf8a10d76277f7eb3d78650faf551d954894fa8518","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02b25c5a20709ba0cc840454a53156c9123503ca13eb0b1e8d27d8bc19527b62"}
{"level":"debug","ts":"2026-07-14T11:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ebcf52bf1e0caeb7fbca1d852a6095a62a3a3ec47eec5363779aa5754e42aee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd7ea4d701d4e25db0264932949b154442b1e66def9a019b18ea500d8ecf1b1b"}
{"level":"debug","ts":"2026-07-14T11:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"538c1463be0b38acb267bbc1fe0bae59718d514cc70b8c96faff855cd5ca94de","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ff00153df7f2780e08f9433abf712a9e0ec1d2791f3808a60779a2499e903f3"}
{"level":"debug","ts":"2026-07-14T11:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41f9811b8a13731e2dc30e554840f6bf771749e01587093fc09367fb66bce994","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb133310f52cdd36676b4baf8a10d76277f7eb3d78650faf551d954894fa8518"}
{"level":"debug","ts":"2026-07-14T11:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb53190628a4d4f55d08fd8d76f1b07d7300d11847dbc3eccfb78db07e82a039","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ebcf52bf1e0caeb7fbca1d852a6095a62a3a3ec47eec5363779aa5754e42aee"}
{"level":"debug","ts":"2026-07-14T11:51:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e09e8fc76b0fd2cb20d1a8dd506bea309952d6e2499bfacc28f37bf64bc74e5a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T11:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/538c1463be0b38acb267bbc1fe0bae59718d514cc70b8c96faff855cd5ca94de"}
{"level":"info","ts":"2026-07-14T11:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41f9811b8a13731e2dc30e554840f6bf771749e01587093fc09367fb66bce994"}
{"level":"info","ts":"2026-07-14T11:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb53190628a4d4f55d08fd8d76f1b07d7300d11847dbc3eccfb78db07e82a039"}
{"level":"info","ts":"2026-07-14T11:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e09e8fc76b0fd2cb20d1a8dd506bea309952d6e2499bfacc28f37bf64bc74e5a"}
{"level":"info","ts":"2026-07-14T11:51:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0bc26a60-3e1e-48d4-83a0-65b22fdecc30","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:46882","PortSpecifier":{"PortValue":46882}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0bc26a60-3e1e-48d4-83a0-65b22fdecc30","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-6b8edc.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T11:51:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0bc26a60-3e1e-48d4-83a0-65b22fdecc30","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:46882","PortSpecifier":{"PortValue":46882}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784029903,"nanos":699868584},"http":{"id":"0bc26a60-3e1e-48d4-83a0-65b22fdecc30","method":"POST","headers":{":authority":"e2e-shared-a-6b8edc.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T11:51:43Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0bc26a60-3e1e-48d4-83a0-65b22fdecc30","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T11:51:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0bc26a60-3e1e-48d4-83a0-65b22fdecc30","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"98097697-1e03-4f32-b7b3-64092a0d335b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=33f0dde7-3530-4b38-b243-0793ef727757"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1e1c21f43337"]}}
{"level":"debug","ts":"2026-07-14T11:51:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0bc26a60-3e1e-48d4-83a0-65b22fdecc30","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1e1c21f43337"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=33f0dde7-3530-4b38-b243-0793ef727757"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"98097697-1e03-4f32-b7b3-64092a0d335b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"dd7f1fbc6933dffa0777c81a23ccd7797b727b4788b727485f292e0511d03653"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6b8edc.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T11:51:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0bc26a60-3e1e-48d4-83a0-65b22fdecc30","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:51:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0bc26a60-3e1e-48d4-83a0-65b22fdecc30","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:51:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0bc26a60-3e1e-48d4-83a0-65b22fdecc30","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6b8edc/rate-test-model-6b8edc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6b8edc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:51:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0bc26a60-3e1e-48d4-83a0-65b22fdecc30","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T11:51:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0bc26a60-3e1e-48d4-83a0-65b22fdecc30","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T11:51:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0bc26a60-3e1e-48d4-83a0-65b22fdecc30","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-14T11:51:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0bc26a60-3e1e-48d4-83a0-65b22fdecc30","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T11:51:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0bc26a60-3e1e-48d4-83a0-65b22fdecc30","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T11:51:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"24bef6fa-be59-4796-972a-ec97318adcf0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:36670","PortSpecifier":{"PortValue":36670}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"24bef6fa-be59-4796-972a-ec97318adcf0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-5c5a7d.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T11:51:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"24bef6fa-be59-4796-972a-ec97318adcf0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:36670","PortSpecifier":{"PortValue":36670}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784029903,"nanos":741366654},"http":{"id":"24bef6fa-be59-4796-972a-ec97318adcf0","method":"POST","headers":{":authority":"e2e-shared-b-5c5a7d.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T11:51:43Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"24bef6fa-be59-4796-972a-ec97318adcf0","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T11:51:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"24bef6fa-be59-4796-972a-ec97318adcf0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"98097697-1e03-4f32-b7b3-64092a0d335b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=33f0dde7-3530-4b38-b243-0793ef727757"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1e1c21f43337"]}}
{"level":"debug","ts":"2026-07-14T11:51:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"24bef6fa-be59-4796-972a-ec97318adcf0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1e1c21f43337"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=33f0dde7-3530-4b38-b243-0793ef727757"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"98097697-1e03-4f32-b7b3-64092a0d335b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e09e8fc76b0fd2cb20d1a8dd506bea309952d6e2499bfacc28f37bf64bc74e5a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-5c5a7d.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T11:51:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"24bef6fa-be59-4796-972a-ec97318adcf0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:51:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"24bef6fa-be59-4796-972a-ec97318adcf0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:51:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"24bef6fa-be59-4796-972a-ec97318adcf0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-5c5a7d/rate-test-model-5c5a7d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-5c5a7d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:51:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"24bef6fa-be59-4796-972a-ec97318adcf0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T11:51:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"24bef6fa-be59-4796-972a-ec97318adcf0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T11:51:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"24bef6fa-be59-4796-972a-ec97318adcf0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T11:51:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"24bef6fa-be59-4796-972a-ec97318adcf0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T11:51:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"24bef6fa-be59-4796-972a-ec97318adcf0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T11:51:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fda0a484-3d81-4fd7-87eb-c16356f6ce0a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:46884","PortSpecifier":{"PortValue":46884}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fda0a484-3d81-4fd7-87eb-c16356f6ce0a","method":"POST","path":"/ai-tenant-e2e-shared-a-6b8edc/rate-test-model-6b8edc/v1/completions","host":"e2e-shared-a-6b8edc.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T11:51:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fda0a484-3d81-4fd7-87eb-c16356f6ce0a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:46884","PortSpecifier":{"PortValue":46884}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784029903,"nanos":782025539},"http":{"id":"fda0a484-3d81-4fd7-87eb-c16356f6ce0a","method":"POST","headers":{":authority":"e2e-shared-a-6b8edc.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-6b8edc/rate-test-model-6b8edc/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T11:51:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fda0a484-3d81-4fd7-87eb-c16356f6ce0a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1b2rFv3Sxj6QMVAwJ_Z7nJz9OZbMr8jYJksOENtmJJFGr4peAjv2lfhikgU6G"}
{"level":"debug","ts":"2026-07-14T11:51:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fda0a484-3d81-4fd7-87eb-c16356f6ce0a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6b8edc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1b2rFv3Sxj6QMVAwJ_Z7nJz9OZbMr8jYJksOENtmJJFGr4peAjv2lfhikgU6G\"}"}
{"level":"debug","ts":"2026-07-14T11:51:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fda0a484-3d81-4fd7-87eb-c16356f6ce0a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6b8edc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"62aa2b98-dda9-44fb-9350-169493b4895a","keyName":"e2e-rate-a-5a0bc0","subscription":"e2e-rate-iso-a-5a0bc0","tenant":"e2e-shared-a-6b8edc","userId":"62aa2b98-dda9-44fb-9350-169493b4895a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T11:51:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fda0a484-3d81-4fd7-87eb-c16356f6ce0a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-6b8edc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-6b8edc/rate-test-model-6b8edc\",\"requestedSubscription\":\"e2e-rate-iso-a-5a0bc0\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T11:51:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fda0a484-3d81-4fd7-87eb-c16356f6ce0a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6b8edc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-6b8edc","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-5a0bc0","namespace":"ai-tenant-e2e-shared-a-6b8edc","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T11:51:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fda0a484-3d81-4fd7-87eb-c16356f6ce0a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T11:51:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fda0a484-3d81-4fd7-87eb-c16356f6ce0a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:51:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fda0a484-3d81-4fd7-87eb-c16356f6ce0a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:51:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fda0a484-3d81-4fd7-87eb-c16356f6ce0a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:51:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fda0a484-3d81-4fd7-87eb-c16356f6ce0a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6b8edc/rate-test-model-6b8edc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6b8edc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:51:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fda0a484-3d81-4fd7-87eb-c16356f6ce0a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T11:51:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fda0a484-3d81-4fd7-87eb-c16356f6ce0a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-5a0bc0"}
{"level":"debug","ts":"2026-07-14T11:51:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fda0a484-3d81-4fd7-87eb-c16356f6ce0a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T11:51:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fda0a484-3d81-4fd7-87eb-c16356f6ce0a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"62aa2b98-dda9-44fb-9350-169493b4895a","keyName":"e2e-rate-a-5a0bc0","selected_subscription":"e2e-rate-iso-a-5a0bc0","selected_subscription_key":"ai-tenant-e2e-shared-a-6b8edc/e2e-rate-iso-a-5a0bc0@ai-tenant-e2e-shared-a-6b8edc/rate-test-model-6b8edc","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-6b8edc","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-5a0bc0","namespace":"ai-tenant-e2e-shared-a-6b8edc","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T11:51:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fda0a484-3d81-4fd7-87eb-c16356f6ce0a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T11:51:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fda0a484-3d81-4fd7-87eb-c16356f6ce0a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T11:51:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c9ae4c28-db50-4c0e-ac9d-36a3d89dc1ae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:46890","PortSpecifier":{"PortValue":46890}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c9ae4c28-db50-4c0e-ac9d-36a3d89dc1ae","method":"POST","path":"/ai-tenant-e2e-shared-a-6b8edc/rate-test-model-6b8edc/v1/completions","host":"e2e-shared-a-6b8edc.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T11:51:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c9ae4c28-db50-4c0e-ac9d-36a3d89dc1ae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:46890","PortSpecifier":{"PortValue":46890}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784029904,"nanos":868860339},"http":{"id":"c9ae4c28-db50-4c0e-ac9d-36a3d89dc1ae","method":"POST","headers":{":authority":"e2e-shared-a-6b8edc.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-6b8edc/rate-test-model-6b8edc/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T11:51:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c9ae4c28-db50-4c0e-ac9d-36a3d89dc1ae","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1b2rFv3Sxj6QMVAwJ_Z7nJz9OZbMr8jYJksOENtmJJFGr4peAjv2lfhikgU6G"}
{"level":"debug","ts":"2026-07-14T11:51:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c9ae4c28-db50-4c0e-ac9d-36a3d89dc1ae","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6b8edc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1b2rFv3Sxj6QMVAwJ_Z7nJz9OZbMr8jYJksOENtmJJFGr4peAjv2lfhikgU6G\"}"}
{"level":"debug","ts":"2026-07-14T11:51:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c9ae4c28-db50-4c0e-ac9d-36a3d89dc1ae","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6b8edc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"62aa2b98-dda9-44fb-9350-169493b4895a","keyName":"e2e-rate-a-5a0bc0","subscription":"e2e-rate-iso-a-5a0bc0","tenant":"e2e-shared-a-6b8edc","userId":"62aa2b98-dda9-44fb-9350-169493b4895a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T11:51:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c9ae4c28-db50-4c0e-ac9d-36a3d89dc1ae","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-6b8edc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-6b8edc/rate-test-model-6b8edc\",\"requestedSubscription\":\"e2e-rate-iso-a-5a0bc0\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T11:51:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c9ae4c28-db50-4c0e-ac9d-36a3d89dc1ae","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6b8edc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-6b8edc","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-5a0bc0","namespace":"ai-tenant-e2e-shared-a-6b8edc","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T11:51:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c9ae4c28-db50-4c0e-ac9d-36a3d89dc1ae","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T11:51:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9ae4c28-db50-4c0e-ac9d-36a3d89dc1ae","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:51:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9ae4c28-db50-4c0e-ac9d-36a3d89dc1ae","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:51:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9ae4c28-db50-4c0e-ac9d-36a3d89dc1ae","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6b8edc/rate-test-model-6b8edc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6b8edc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:51:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9ae4c28-db50-4c0e-ac9d-36a3d89dc1ae","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:51:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c9ae4c28-db50-4c0e-ac9d-36a3d89dc1ae","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T11:51:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c9ae4c28-db50-4c0e-ac9d-36a3d89dc1ae","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-5a0bc0"}
{"level":"debug","ts":"2026-07-14T11:51:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c9ae4c28-db50-4c0e-ac9d-36a3d89dc1ae","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T11:51:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c9ae4c28-db50-4c0e-ac9d-36a3d89dc1ae","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"62aa2b98-dda9-44fb-9350-169493b4895a","keyName":"e2e-rate-a-5a0bc0","selected_subscription":"e2e-rate-iso-a-5a0bc0","selected_subscription_key":"ai-tenant-e2e-shared-a-6b8edc/e2e-rate-iso-a-5a0bc0@ai-tenant-e2e-shared-a-6b8edc/rate-test-model-6b8edc","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-6b8edc","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-5a0bc0","namespace":"ai-tenant-e2e-shared-a-6b8edc","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T11:51:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c9ae4c28-db50-4c0e-ac9d-36a3d89dc1ae","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T11:51:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c9ae4c28-db50-4c0e-ac9d-36a3d89dc1ae","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T11:51:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9afbffdb-7706-4819-a2af-6d531bc35aa4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:46898","PortSpecifier":{"PortValue":46898}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9afbffdb-7706-4819-a2af-6d531bc35aa4","method":"POST","path":"/ai-tenant-e2e-shared-a-6b8edc/rate-test-model-6b8edc/v1/completions","host":"e2e-shared-a-6b8edc.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T11:51:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9afbffdb-7706-4819-a2af-6d531bc35aa4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:46898","PortSpecifier":{"PortValue":46898}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784029905,"nanos":909902403},"http":{"id":"9afbffdb-7706-4819-a2af-6d531bc35aa4","method":"POST","headers":{":authority":"e2e-shared-a-6b8edc.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-6b8edc/rate-test-model-6b8edc/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T11:51:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9afbffdb-7706-4819-a2af-6d531bc35aa4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1b2rFv3Sxj6QMVAwJ_Z7nJz9OZbMr8jYJksOENtmJJFGr4peAjv2lfhikgU6G"}
{"level":"debug","ts":"2026-07-14T11:51:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9afbffdb-7706-4819-a2af-6d531bc35aa4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6b8edc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1b2rFv3Sxj6QMVAwJ_Z7nJz9OZbMr8jYJksOENtmJJFGr4peAjv2lfhikgU6G\"}"}
{"level":"debug","ts":"2026-07-14T11:51:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9afbffdb-7706-4819-a2af-6d531bc35aa4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6b8edc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"62aa2b98-dda9-44fb-9350-169493b4895a","keyName":"e2e-rate-a-5a0bc0","subscription":"e2e-rate-iso-a-5a0bc0","tenant":"e2e-shared-a-6b8edc","userId":"62aa2b98-dda9-44fb-9350-169493b4895a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T11:51:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9afbffdb-7706-4819-a2af-6d531bc35aa4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-6b8edc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-6b8edc/rate-test-model-6b8edc\",\"requestedSubscription\":\"e2e-rate-iso-a-5a0bc0\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T11:51:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9afbffdb-7706-4819-a2af-6d531bc35aa4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6b8edc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-6b8edc","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-5a0bc0","namespace":"ai-tenant-e2e-shared-a-6b8edc","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T11:51:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9afbffdb-7706-4819-a2af-6d531bc35aa4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T11:51:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9afbffdb-7706-4819-a2af-6d531bc35aa4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:51:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9afbffdb-7706-4819-a2af-6d531bc35aa4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:51:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9afbffdb-7706-4819-a2af-6d531bc35aa4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6b8edc/rate-test-model-6b8edc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6b8edc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:51:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9afbffdb-7706-4819-a2af-6d531bc35aa4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:51:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9afbffdb-7706-4819-a2af-6d531bc35aa4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T11:51:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9afbffdb-7706-4819-a2af-6d531bc35aa4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-5a0bc0"}
{"level":"debug","ts":"2026-07-14T11:51:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9afbffdb-7706-4819-a2af-6d531bc35aa4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T11:51:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9afbffdb-7706-4819-a2af-6d531bc35aa4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"62aa2b98-dda9-44fb-9350-169493b4895a","keyName":"e2e-rate-a-5a0bc0","selected_subscription":"e2e-rate-iso-a-5a0bc0","selected_subscription_key":"ai-tenant-e2e-shared-a-6b8edc/e2e-rate-iso-a-5a0bc0@ai-tenant-e2e-shared-a-6b8edc/rate-test-model-6b8edc","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-6b8edc","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-5a0bc0","namespace":"ai-tenant-e2e-shared-a-6b8edc","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T11:51:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9afbffdb-7706-4819-a2af-6d531bc35aa4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T11:51:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9afbffdb-7706-4819-a2af-6d531bc35aa4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T11:51:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fe1af81a-852d-4c31-bd90-9edb48976fb5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:33076","PortSpecifier":{"PortValue":33076}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fe1af81a-852d-4c31-bd90-9edb48976fb5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-6b8edc.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T11:51:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fe1af81a-852d-4c31-bd90-9edb48976fb5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:33076","PortSpecifier":{"PortValue":33076}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784029916,"nanos":874890525},"http":{"id":"fe1af81a-852d-4c31-bd90-9edb48976fb5","method":"POST","headers":{":authority":"e2e-shared-a-6b8edc.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T11:51:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fe1af81a-852d-4c31-bd90-9edb48976fb5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T11:51:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fe1af81a-852d-4c31-bd90-9edb48976fb5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"98097697-1e03-4f32-b7b3-64092a0d335b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=33f0dde7-3530-4b38-b243-0793ef727757"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1e1c21f43337"]}}
{"level":"debug","ts":"2026-07-14T11:51:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fe1af81a-852d-4c31-bd90-9edb48976fb5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1e1c21f43337"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=33f0dde7-3530-4b38-b243-0793ef727757"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"98097697-1e03-4f32-b7b3-64092a0d335b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"dd7f1fbc6933dffa0777c81a23ccd7797b727b4788b727485f292e0511d03653"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6b8edc.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T11:51:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe1af81a-852d-4c31-bd90-9edb48976fb5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:51:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe1af81a-852d-4c31-bd90-9edb48976fb5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:51:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe1af81a-852d-4c31-bd90-9edb48976fb5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6b8edc/rate-test-model-6b8edc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6b8edc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:51:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fe1af81a-852d-4c31-bd90-9edb48976fb5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T11:51:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fe1af81a-852d-4c31-bd90-9edb48976fb5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T11:51:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fe1af81a-852d-4c31-bd90-9edb48976fb5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T11:51:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fe1af81a-852d-4c31-bd90-9edb48976fb5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T11:51:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fe1af81a-852d-4c31-bd90-9edb48976fb5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T11:51:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9a68a452-00fd-4cdd-b332-07f38596db67","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:48958","PortSpecifier":{"PortValue":48958}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9a68a452-00fd-4cdd-b332-07f38596db67","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-5c5a7d.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T11:51:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9a68a452-00fd-4cdd-b332-07f38596db67","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:48958","PortSpecifier":{"PortValue":48958}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784029916,"nanos":913848299},"http":{"id":"9a68a452-00fd-4cdd-b332-07f38596db67","method":"POST","headers":{":authority":"e2e-shared-b-5c5a7d.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T11:51:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9a68a452-00fd-4cdd-b332-07f38596db67","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T11:51:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9a68a452-00fd-4cdd-b332-07f38596db67","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"98097697-1e03-4f32-b7b3-64092a0d335b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=33f0dde7-3530-4b38-b243-0793ef727757"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1e1c21f43337"]}}
{"level":"debug","ts":"2026-07-14T11:51:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9a68a452-00fd-4cdd-b332-07f38596db67","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1e1c21f43337"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=33f0dde7-3530-4b38-b243-0793ef727757"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"98097697-1e03-4f32-b7b3-64092a0d335b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e09e8fc76b0fd2cb20d1a8dd506bea309952d6e2499bfacc28f37bf64bc74e5a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-5c5a7d.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T11:51:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a68a452-00fd-4cdd-b332-07f38596db67","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:51:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a68a452-00fd-4cdd-b332-07f38596db67","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:51:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a68a452-00fd-4cdd-b332-07f38596db67","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-5c5a7d/rate-test-model-5c5a7d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-5c5a7d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:51:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9a68a452-00fd-4cdd-b332-07f38596db67","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T11:51:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a68a452-00fd-4cdd-b332-07f38596db67","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T11:51:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a68a452-00fd-4cdd-b332-07f38596db67","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T11:51:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9a68a452-00fd-4cdd-b332-07f38596db67","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T11:51:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9a68a452-00fd-4cdd-b332-07f38596db67","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T11:51:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"156920bb-5495-4d70-a831-394f3c60a6d7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:33086","PortSpecifier":{"PortValue":33086}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"156920bb-5495-4d70-a831-394f3c60a6d7","method":"POST","path":"/ai-tenant-e2e-shared-a-6b8edc/rate-test-model-6b8edc/v1/completions","host":"e2e-shared-a-6b8edc.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T11:51:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"156920bb-5495-4d70-a831-394f3c60a6d7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:33086","PortSpecifier":{"PortValue":33086}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784029916,"nanos":950174414},"http":{"id":"156920bb-5495-4d70-a831-394f3c60a6d7","method":"POST","headers":{":authority":"e2e-shared-a-6b8edc.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-6b8edc/rate-test-model-6b8edc/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T11:51:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"156920bb-5495-4d70-a831-394f3c60a6d7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-197KvUEqvls19B1SZ_g5P13y6Z7RcaUKIGioJ6RrxfP8JVNue2YPQx7K9huJz"}
{"level":"debug","ts":"2026-07-14T11:51:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"156920bb-5495-4d70-a831-394f3c60a6d7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6b8edc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-197KvUEqvls19B1SZ_g5P13y6Z7RcaUKIGioJ6RrxfP8JVNue2YPQx7K9huJz\"}"}
{"level":"debug","ts":"2026-07-14T11:51:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"156920bb-5495-4d70-a831-394f3c60a6d7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6b8edc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d7fcd97d-e3c9-4cc3-85d8-f519e5e6b231","keyName":"e2e-rate-a-c0500c","subscription":"e2e-rate-iso-a-c0500c","tenant":"e2e-shared-a-6b8edc","userId":"d7fcd97d-e3c9-4cc3-85d8-f519e5e6b231","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T11:51:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"156920bb-5495-4d70-a831-394f3c60a6d7","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-6b8edc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-6b8edc/rate-test-model-6b8edc\",\"requestedSubscription\":\"e2e-rate-iso-a-c0500c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T11:51:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"156920bb-5495-4d70-a831-394f3c60a6d7","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6b8edc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-6b8edc","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c0500c","namespace":"ai-tenant-e2e-shared-a-6b8edc","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T11:51:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"156920bb-5495-4d70-a831-394f3c60a6d7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T11:51:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"156920bb-5495-4d70-a831-394f3c60a6d7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:51:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"156920bb-5495-4d70-a831-394f3c60a6d7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:51:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"156920bb-5495-4d70-a831-394f3c60a6d7","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:51:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"156920bb-5495-4d70-a831-394f3c60a6d7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6b8edc/rate-test-model-6b8edc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6b8edc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:51:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"156920bb-5495-4d70-a831-394f3c60a6d7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-c0500c"}
{"level":"debug","ts":"2026-07-14T11:51:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"156920bb-5495-4d70-a831-394f3c60a6d7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T11:51:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"156920bb-5495-4d70-a831-394f3c60a6d7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T11:51:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"156920bb-5495-4d70-a831-394f3c60a6d7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d7fcd97d-e3c9-4cc3-85d8-f519e5e6b231","keyName":"e2e-rate-a-c0500c","selected_subscription":"e2e-rate-iso-a-c0500c","selected_subscription_key":"ai-tenant-e2e-shared-a-6b8edc/e2e-rate-iso-a-c0500c@ai-tenant-e2e-shared-a-6b8edc/rate-test-model-6b8edc","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-6b8edc","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c0500c","namespace":"ai-tenant-e2e-shared-a-6b8edc","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T11:51:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"156920bb-5495-4d70-a831-394f3c60a6d7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T11:51:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"156920bb-5495-4d70-a831-394f3c60a6d7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T11:51:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"44344444-0df0-48fd-876f-2a356c74b164","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:33090","PortSpecifier":{"PortValue":33090}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"44344444-0df0-48fd-876f-2a356c74b164","method":"POST","path":"/ai-tenant-e2e-shared-a-6b8edc/rate-test-model-6b8edc/v1/completions","host":"e2e-shared-a-6b8edc.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T11:51:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"44344444-0df0-48fd-876f-2a356c74b164","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:33090","PortSpecifier":{"PortValue":33090}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784029917,"nanos":984322269},"http":{"id":"44344444-0df0-48fd-876f-2a356c74b164","method":"POST","headers":{":authority":"e2e-shared-a-6b8edc.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-6b8edc/rate-test-model-6b8edc/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T11:51:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"44344444-0df0-48fd-876f-2a356c74b164","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-197KvUEqvls19B1SZ_g5P13y6Z7RcaUKIGioJ6RrxfP8JVNue2YPQx7K9huJz"}
{"level":"debug","ts":"2026-07-14T11:51:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"44344444-0df0-48fd-876f-2a356c74b164","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6b8edc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-197KvUEqvls19B1SZ_g5P13y6Z7RcaUKIGioJ6RrxfP8JVNue2YPQx7K9huJz\"}"}
{"level":"debug","ts":"2026-07-14T11:51:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"44344444-0df0-48fd-876f-2a356c74b164","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6b8edc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d7fcd97d-e3c9-4cc3-85d8-f519e5e6b231","keyName":"e2e-rate-a-c0500c","subscription":"e2e-rate-iso-a-c0500c","tenant":"e2e-shared-a-6b8edc","userId":"d7fcd97d-e3c9-4cc3-85d8-f519e5e6b231","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T11:51:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"44344444-0df0-48fd-876f-2a356c74b164","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-6b8edc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-6b8edc/rate-test-model-6b8edc\",\"requestedSubscription\":\"e2e-rate-iso-a-c0500c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T11:51:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"44344444-0df0-48fd-876f-2a356c74b164","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6b8edc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-6b8edc","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c0500c","namespace":"ai-tenant-e2e-shared-a-6b8edc","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T11:51:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"44344444-0df0-48fd-876f-2a356c74b164","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T11:51:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"44344444-0df0-48fd-876f-2a356c74b164","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:51:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"44344444-0df0-48fd-876f-2a356c74b164","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:51:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"44344444-0df0-48fd-876f-2a356c74b164","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6b8edc/rate-test-model-6b8edc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6b8edc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:51:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"44344444-0df0-48fd-876f-2a356c74b164","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:51:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"44344444-0df0-48fd-876f-2a356c74b164","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T11:51:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"44344444-0df0-48fd-876f-2a356c74b164","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-c0500c"}
{"level":"debug","ts":"2026-07-14T11:51:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"44344444-0df0-48fd-876f-2a356c74b164","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T11:51:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"44344444-0df0-48fd-876f-2a356c74b164","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d7fcd97d-e3c9-4cc3-85d8-f519e5e6b231","keyName":"e2e-rate-a-c0500c","selected_subscription":"e2e-rate-iso-a-c0500c","selected_subscription_key":"ai-tenant-e2e-shared-a-6b8edc/e2e-rate-iso-a-c0500c@ai-tenant-e2e-shared-a-6b8edc/rate-test-model-6b8edc","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-6b8edc","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c0500c","namespace":"ai-tenant-e2e-shared-a-6b8edc","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T11:51:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"44344444-0df0-48fd-876f-2a356c74b164","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T11:51:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"44344444-0df0-48fd-876f-2a356c74b164","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T11:51:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8873f3d9-c21c-424a-a05d-609018cacdd1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:33100","PortSpecifier":{"PortValue":33100}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8873f3d9-c21c-424a-a05d-609018cacdd1","method":"POST","path":"/ai-tenant-e2e-shared-a-6b8edc/rate-test-model-6b8edc/v1/completions","host":"e2e-shared-a-6b8edc.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T11:51:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8873f3d9-c21c-424a-a05d-609018cacdd1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:33100","PortSpecifier":{"PortValue":33100}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784029919,"nanos":18847581},"http":{"id":"8873f3d9-c21c-424a-a05d-609018cacdd1","method":"POST","headers":{":authority":"e2e-shared-a-6b8edc.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-6b8edc/rate-test-model-6b8edc/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T11:51:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8873f3d9-c21c-424a-a05d-609018cacdd1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-197KvUEqvls19B1SZ_g5P13y6Z7RcaUKIGioJ6RrxfP8JVNue2YPQx7K9huJz"}
{"level":"debug","ts":"2026-07-14T11:51:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8873f3d9-c21c-424a-a05d-609018cacdd1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6b8edc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-197KvUEqvls19B1SZ_g5P13y6Z7RcaUKIGioJ6RrxfP8JVNue2YPQx7K9huJz\"}"}
{"level":"debug","ts":"2026-07-14T11:51:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8873f3d9-c21c-424a-a05d-609018cacdd1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6b8edc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d7fcd97d-e3c9-4cc3-85d8-f519e5e6b231","keyName":"e2e-rate-a-c0500c","subscription":"e2e-rate-iso-a-c0500c","tenant":"e2e-shared-a-6b8edc","userId":"d7fcd97d-e3c9-4cc3-85d8-f519e5e6b231","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T11:51:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8873f3d9-c21c-424a-a05d-609018cacdd1","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-6b8edc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-6b8edc/rate-test-model-6b8edc\",\"requestedSubscription\":\"e2e-rate-iso-a-c0500c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T11:51:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8873f3d9-c21c-424a-a05d-609018cacdd1","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6b8edc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-6b8edc","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c0500c","namespace":"ai-tenant-e2e-shared-a-6b8edc","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T11:51:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8873f3d9-c21c-424a-a05d-609018cacdd1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T11:51:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8873f3d9-c21c-424a-a05d-609018cacdd1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:51:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8873f3d9-c21c-424a-a05d-609018cacdd1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:51:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8873f3d9-c21c-424a-a05d-609018cacdd1","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:51:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8873f3d9-c21c-424a-a05d-609018cacdd1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6b8edc/rate-test-model-6b8edc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6b8edc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:51:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8873f3d9-c21c-424a-a05d-609018cacdd1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T11:51:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8873f3d9-c21c-424a-a05d-609018cacdd1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T11:51:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8873f3d9-c21c-424a-a05d-609018cacdd1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-c0500c"}
{"level":"debug","ts":"2026-07-14T11:51:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8873f3d9-c21c-424a-a05d-609018cacdd1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d7fcd97d-e3c9-4cc3-85d8-f519e5e6b231","keyName":"e2e-rate-a-c0500c","selected_subscription":"e2e-rate-iso-a-c0500c","selected_subscription_key":"ai-tenant-e2e-shared-a-6b8edc/e2e-rate-iso-a-c0500c@ai-tenant-e2e-shared-a-6b8edc/rate-test-model-6b8edc","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-6b8edc","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c0500c","namespace":"ai-tenant-e2e-shared-a-6b8edc","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T11:51:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8873f3d9-c21c-424a-a05d-609018cacdd1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T11:51:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8873f3d9-c21c-424a-a05d-609018cacdd1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T11:51:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a2323a5b-f93e-4393-af42-599eec8f67d3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:48968","PortSpecifier":{"PortValue":48968}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a2323a5b-f93e-4393-af42-599eec8f67d3","method":"POST","path":"/ai-tenant-e2e-shared-b-5c5a7d/rate-test-model-5c5a7d/v1/completions","host":"e2e-shared-b-5c5a7d.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T11:51:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a2323a5b-f93e-4393-af42-599eec8f67d3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:48968","PortSpecifier":{"PortValue":48968}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784029919,"nanos":52872262},"http":{"id":"a2323a5b-f93e-4393-af42-599eec8f67d3","method":"POST","headers":{":authority":"e2e-shared-b-5c5a7d.apps.50366758-03de-4132-b149-1e1c21f43337.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-5c5a7d/rate-test-model-5c5a7d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T11:51:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a2323a5b-f93e-4393-af42-599eec8f67d3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1W7Zo6PRO3YdtvuTw_h4jShUqCDoFreyXmGAok9DhaguzoBbdURMAivEqgoeZ"}
{"level":"debug","ts":"2026-07-14T11:51:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a2323a5b-f93e-4393-af42-599eec8f67d3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-5c5a7d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1W7Zo6PRO3YdtvuTw_h4jShUqCDoFreyXmGAok9DhaguzoBbdURMAivEqgoeZ\"}"}
{"level":"debug","ts":"2026-07-14T11:51:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a2323a5b-f93e-4393-af42-599eec8f67d3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-5c5a7d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"cc4df436-e737-4ca4-a422-3b7d6109eb4d","keyName":"e2e-rate-b-c0500c","subscription":"e2e-rate-iso-b-c0500c","tenant":"e2e-shared-b-5c5a7d","userId":"cc4df436-e737-4ca4-a422-3b7d6109eb4d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T11:51:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a2323a5b-f93e-4393-af42-599eec8f67d3","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-5c5a7d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-5c5a7d/rate-test-model-5c5a7d\",\"requestedSubscription\":\"e2e-rate-iso-b-c0500c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T11:51:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a2323a5b-f93e-4393-af42-599eec8f67d3","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-5c5a7d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5c5a7d","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-c0500c","namespace":"ai-tenant-e2e-shared-b-5c5a7d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T11:51:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a2323a5b-f93e-4393-af42-599eec8f67d3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T11:51:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a2323a5b-f93e-4393-af42-599eec8f67d3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:51:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a2323a5b-f93e-4393-af42-599eec8f67d3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:51:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a2323a5b-f93e-4393-af42-599eec8f67d3","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:51:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a2323a5b-f93e-4393-af42-599eec8f67d3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-5c5a7d/rate-test-model-5c5a7d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-5c5a7d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T11:51:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a2323a5b-f93e-4393-af42-599eec8f67d3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T11:51:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a2323a5b-f93e-4393-af42-599eec8f67d3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-c0500c"}
{"level":"debug","ts":"2026-07-14T11:51:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a2323a5b-f93e-4393-af42-599eec8f67d3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T11:51:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a2323a5b-f93e-4393-af42-599eec8f67d3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"cc4df436-e737-4ca4-a422-3b7d6109eb4d","keyName":"e2e-rate-b-c0500c","selected_subscription":"e2e-rate-iso-b-c0500c","selected_subscription_key":"ai-tenant-e2e-shared-b-5c5a7d/e2e-rate-iso-b-c0500c@ai-tenant-e2e-shared-b-5c5a7d/rate-test-model-5c5a7d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5c5a7d","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-c0500c","namespace":"ai-tenant-e2e-shared-b-5c5a7d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T11:51:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a2323a5b-f93e-4393-af42-599eec8f67d3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T11:51:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a2323a5b-f93e-4393-af42-599eec8f67d3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T11:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6807a5b34b8dbc16e7dde053f837a160791782f7d8fd4cec0c178abdefc6c4d1"}
{"level":"info","ts":"2026-07-14T11:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e070f1ad2c2e72cfc483b37a979ea853738ff8ed8bdfbe6aa8764aaa5bf55bc5"}
{"level":"info","ts":"2026-07-14T11:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ca89911e30b10b25605572763347425f5dbe8c1334120218948acd7f72710f85"}
{"level":"info","ts":"2026-07-14T11:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/02b25c5a20709ba0cc840454a53156c9123503ca13eb0b1e8d27d8bc19527b62"}
{"level":"info","ts":"2026-07-14T11:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b7b052134374a726612de2cac74d2cc38b807d718997176cb904fca41535d1d8"}
{"level":"info","ts":"2026-07-14T11:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bb53190628a4d4f55d08fd8d76f1b07d7300d11847dbc3eccfb78db07e82a039"}
{"level":"info","ts":"2026-07-14T11:52:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8f8bec79f2432774cdf78cbfd5d73b35acb21af97befd7c6f3b858900d01e5b6"}
{"level":"info","ts":"2026-07-14T11:52:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/14818cdce25501620e08bd39a469a9a1dff96c564c7e81e7e9aa3ebadc998110"}
{"level":"info","ts":"2026-07-14T11:52:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bb133310f52cdd36676b4baf8a10d76277f7eb3d78650faf551d954894fa8518"}
{"level":"info","ts":"2026-07-14T11:52:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ddc17b078bd6ff2e7eb85b3a7e1da99613b2aedec525fb7afa3ed4da73cdef65"}
{"level":"info","ts":"2026-07-14T11:52:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/720d5ef970419c7204236a61b3ed680578b6b847eb93c868cccc3fac538c1d75"}
{"level":"info","ts":"2026-07-14T11:52:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/538c1463be0b38acb267bbc1fe0bae59718d514cc70b8c96faff855cd5ca94de"}
{"level":"info","ts":"2026-07-14T11:52:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/50a80b9138f4eb7c59c2fe3d7fa2aac65b0abcfba00a3c42596ce24f620441ab"}
{"level":"info","ts":"2026-07-14T11:52:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dc2d0e6598142f4c57b463ffd1801ff3ad88befb008dede6c60d8d0a5782f194"}
{"level":"info","ts":"2026-07-14T11:52:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/67a02caf7114fd5dcc82a9db22efdab0388444c986e6bfcea91c31eb50ddeb20"}
{"level":"info","ts":"2026-07-14T11:52:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a2d367f921746914383df7cc861c34f0e76aa2bc40afad1fbb67499e43434d56"}
{"level":"info","ts":"2026-07-14T11:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8d308ea6f182373125f1f87d79ab4fb2c62745b1d19eca518cfdb27b9ffff852"}
{"level":"info","ts":"2026-07-14T11:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dd7f1fbc6933dffa0777c81a23ccd7797b727b4788b727485f292e0511d03653"}
{"level":"info","ts":"2026-07-14T11:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2ff00153df7f2780e08f9433abf712a9e0ec1d2791f3808a60779a2499e903f3"}
{"level":"info","ts":"2026-07-14T11:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/41f9811b8a13731e2dc30e554840f6bf771749e01587093fc09367fb66bce994"}
{"level":"info","ts":"2026-07-14T11:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e09e8fc76b0fd2cb20d1a8dd506bea309952d6e2499bfacc28f37bf64bc74e5a"}
{"level":"info","ts":"2026-07-14T11:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fd7ea4d701d4e25db0264932949b154442b1e66def9a019b18ea500d8ecf1b1b"}
{"level":"info","ts":"2026-07-14T11:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2ebcf52bf1e0caeb7fbca1d852a6095a62a3a3ec47eec5363779aa5754e42aee"}
{"level":"info","ts":"2026-07-14T11:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/af8c2e59c857902dcab9205756cba6779323e9728f8c046e66a334e1c319dec1"}