--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"info","ts":"2026-07-10T16:30:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02e585be0a3e3babd01ef8c850f33bbe50fecc939d9df2eedb5bb4acb354f9c5"}
{"level":"debug","ts":"2026-07-10T16:30:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c812e7efd38bd24e7bbbeb5794e5b89c62643856135e7f8c680db6b239cc0d1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:30:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:30:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:30:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c812e7efd38bd24e7bbbeb5794e5b89c62643856135e7f8c680db6b239cc0d1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:30:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c812e7efd38bd24e7bbbeb5794e5b89c62643856135e7f8c680db6b239cc0d1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:30:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:30:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:30:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c812e7efd38bd24e7bbbeb5794e5b89c62643856135e7f8c680db6b239cc0d1a"}
{"level":"info","ts":"2026-07-10T16:30:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c812e7efd38bd24e7bbbeb5794e5b89c62643856135e7f8c680db6b239cc0d1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:30:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c812e7efd38bd24e7bbbeb5794e5b89c62643856135e7f8c680db6b239cc0d1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:30:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:30:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:30:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c812e7efd38bd24e7bbbeb5794e5b89c62643856135e7f8c680db6b239cc0d1a"}
{"level":"error","ts":"2026-07-10T16:30:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c812e7efd38bd24e7bbbeb5794e5b89c62643856135e7f8c680db6b239cc0d1a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c812e7efd38bd24e7bbbeb5794e5b89c62643856135e7f8c680db6b239cc0d1a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T16:30:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c812e7efd38bd24e7bbbeb5794e5b89c62643856135e7f8c680db6b239cc0d1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:30:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c812e7efd38bd24e7bbbeb5794e5b89c62643856135e7f8c680db6b239cc0d1a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:30:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c812e7efd38bd24e7bbbeb5794e5b89c62643856135e7f8c680db6b239cc0d1a"}
{"level":"debug","ts":"2026-07-10T16:30:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c812e7efd38bd24e7bbbeb5794e5b89c62643856135e7f8c680db6b239cc0d1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:30:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:30:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c812e7efd38bd24e7bbbeb5794e5b89c62643856135e7f8c680db6b239cc0d1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:30:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c812e7efd38bd24e7bbbeb5794e5b89c62643856135e7f8c680db6b239cc0d1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:30:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c812e7efd38bd24e7bbbeb5794e5b89c62643856135e7f8c680db6b239cc0d1a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:30:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c812e7efd38bd24e7bbbeb5794e5b89c62643856135e7f8c680db6b239cc0d1a"}
{"level":"debug","ts":"2026-07-10T16:30:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b272d1ead34dbe3577d43a27f338e8f3adcf718b201141e28bf43b75d10eb843","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:30:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:30:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:30:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b272d1ead34dbe3577d43a27f338e8f3adcf718b201141e28bf43b75d10eb843","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:30:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7fa28ab12453ec5f78dbdd87b0cc4a703038ee87066be1e5274abcb73c526e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:30:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:30:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:30:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b272d1ead34dbe3577d43a27f338e8f3adcf718b201141e28bf43b75d10eb843"}
{"level":"info","ts":"2026-07-10T16:30:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7fa28ab12453ec5f78dbdd87b0cc4a703038ee87066be1e5274abcb73c526e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:30:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b272d1ead34dbe3577d43a27f338e8f3adcf718b201141e28bf43b75d10eb843","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:30:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:30:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b272d1ead34dbe3577d43a27f338e8f3adcf718b201141e28bf43b75d10eb843"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:30:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7fa28ab12453ec5f78dbdd87b0cc4a703038ee87066be1e5274abcb73c526e1"}
{"level":"info","ts":"2026-07-10T16:30:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b272d1ead34dbe3577d43a27f338e8f3adcf718b201141e28bf43b75d10eb843","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:30:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7fa28ab12453ec5f78dbdd87b0cc4a703038ee87066be1e5274abcb73c526e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:30:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:30:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7fa28ab12453ec5f78dbdd87b0cc4a703038ee87066be1e5274abcb73c526e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:30:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b272d1ead34dbe3577d43a27f338e8f3adcf718b201141e28bf43b75d10eb843"}
{"level":"info","ts":"2026-07-10T16:30:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7fa28ab12453ec5f78dbdd87b0cc4a703038ee87066be1e5274abcb73c526e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:30:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b272d1ead34dbe3577d43a27f338e8f3adcf718b201141e28bf43b75d10eb843","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:30:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7fa28ab12453ec5f78dbdd87b0cc4a703038ee87066be1e5274abcb73c526e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:30:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:30:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:30:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7fa28ab12453ec5f78dbdd87b0cc4a703038ee87066be1e5274abcb73c526e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:30:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7fa28ab12453ec5f78dbdd87b0cc4a703038ee87066be1e5274abcb73c526e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:30:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7fa28ab12453ec5f78dbdd87b0cc4a703038ee87066be1e5274abcb73c526e1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:30:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7fa28ab12453ec5f78dbdd87b0cc4a703038ee87066be1e5274abcb73c526e1"}
{"level":"debug","ts":"2026-07-10T16:30:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7fa28ab12453ec5f78dbdd87b0cc4a703038ee87066be1e5274abcb73c526e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:30:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:30:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7fa28ab12453ec5f78dbdd87b0cc4a703038ee87066be1e5274abcb73c526e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:30:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b272d1ead34dbe3577d43a27f338e8f3adcf718b201141e28bf43b75d10eb843"}
{"level":"info","ts":"2026-07-10T16:30:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7fa28ab12453ec5f78dbdd87b0cc4a703038ee87066be1e5274abcb73c526e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:30:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7fa28ab12453ec5f78dbdd87b0cc4a703038ee87066be1e5274abcb73c526e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:30:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:30:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:30:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7fa28ab12453ec5f78dbdd87b0cc4a703038ee87066be1e5274abcb73c526e1"}
{"level":"info","ts":"2026-07-10T16:30:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7fa28ab12453ec5f78dbdd87b0cc4a703038ee87066be1e5274abcb73c526e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:30:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7fa28ab12453ec5f78dbdd87b0cc4a703038ee87066be1e5274abcb73c526e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:30:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7fa28ab12453ec5f78dbdd87b0cc4a703038ee87066be1e5274abcb73c526e1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:30:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7fa28ab12453ec5f78dbdd87b0cc4a703038ee87066be1e5274abcb73c526e1"}
{"level":"debug","ts":"2026-07-10T16:30:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7fa28ab12453ec5f78dbdd87b0cc4a703038ee87066be1e5274abcb73c526e1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:30:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7fa28ab12453ec5f78dbdd87b0cc4a703038ee87066be1e5274abcb73c526e1"}
{"level":"debug","ts":"2026-07-10T16:30:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7fa28ab12453ec5f78dbdd87b0cc4a703038ee87066be1e5274abcb73c526e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:30:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:30:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7fa28ab12453ec5f78dbdd87b0cc4a703038ee87066be1e5274abcb73c526e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:30:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7fa28ab12453ec5f78dbdd87b0cc4a703038ee87066be1e5274abcb73c526e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:30:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7fa28ab12453ec5f78dbdd87b0cc4a703038ee87066be1e5274abcb73c526e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:30:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:30:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:30:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7fa28ab12453ec5f78dbdd87b0cc4a703038ee87066be1e5274abcb73c526e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:30:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7fa28ab12453ec5f78dbdd87b0cc4a703038ee87066be1e5274abcb73c526e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:30:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7fa28ab12453ec5f78dbdd87b0cc4a703038ee87066be1e5274abcb73c526e1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:30:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7fa28ab12453ec5f78dbdd87b0cc4a703038ee87066be1e5274abcb73c526e1"}
{"level":"debug","ts":"2026-07-10T16:30:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7fa28ab12453ec5f78dbdd87b0cc4a703038ee87066be1e5274abcb73c526e1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:30:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7fa28ab12453ec5f78dbdd87b0cc4a703038ee87066be1e5274abcb73c526e1"}
{"level":"debug","ts":"2026-07-10T16:30:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7fa28ab12453ec5f78dbdd87b0cc4a703038ee87066be1e5274abcb73c526e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:30:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:30:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7fa28ab12453ec5f78dbdd87b0cc4a703038ee87066be1e5274abcb73c526e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:30:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7fa28ab12453ec5f78dbdd87b0cc4a703038ee87066be1e5274abcb73c526e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:30:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7fa28ab12453ec5f78dbdd87b0cc4a703038ee87066be1e5274abcb73c526e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:30:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:30:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:30:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7fa28ab12453ec5f78dbdd87b0cc4a703038ee87066be1e5274abcb73c526e1"}
{"level":"info","ts":"2026-07-10T16:30:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7fa28ab12453ec5f78dbdd87b0cc4a703038ee87066be1e5274abcb73c526e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:30:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7fa28ab12453ec5f78dbdd87b0cc4a703038ee87066be1e5274abcb73c526e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:30:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7fa28ab12453ec5f78dbdd87b0cc4a703038ee87066be1e5274abcb73c526e1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:30:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7fa28ab12453ec5f78dbdd87b0cc4a703038ee87066be1e5274abcb73c526e1"}
{"level":"debug","ts":"2026-07-10T16:30:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7fa28ab12453ec5f78dbdd87b0cc4a703038ee87066be1e5274abcb73c526e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:30:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:30:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7fa28ab12453ec5f78dbdd87b0cc4a703038ee87066be1e5274abcb73c526e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:30:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7fa28ab12453ec5f78dbdd87b0cc4a703038ee87066be1e5274abcb73c526e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:30:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7fa28ab12453ec5f78dbdd87b0cc4a703038ee87066be1e5274abcb73c526e1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:30:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7fa28ab12453ec5f78dbdd87b0cc4a703038ee87066be1e5274abcb73c526e1"}
{"level":"info","ts":"2026-07-10T16:30:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d695a06bfa0acd62621c77129e6b18abc7d4382758dae60b61f6c80aa78b7795"}
{"level":"info","ts":"2026-07-10T16:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4f70a3125e7b5be89b90ec47520f0cb3d1bc43f510f90e1fca0a2e672bbfe179"}
{"level":"info","ts":"2026-07-10T16:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/11ed6904cf0699f1a012c0da62a4c901e3a8a0e438a66d52dec0de60c9f49c04"}
{"level":"info","ts":"2026-07-10T16:30:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3abf5adc388c97e5a5f6ce52189d256abfa585195d424ad2c02a7e65d6631538"}
{"level":"info","ts":"2026-07-10T16:30:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c812e7efd38bd24e7bbbeb5794e5b89c62643856135e7f8c680db6b239cc0d1a"}
{"level":"info","ts":"2026-07-10T16:30:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f7fa28ab12453ec5f78dbdd87b0cc4a703038ee87066be1e5274abcb73c526e1"}
{"level":"info","ts":"2026-07-10T16:30:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/02e585be0a3e3babd01ef8c850f33bbe50fecc939d9df2eedb5bb4acb354f9c5"}
{"level":"info","ts":"2026-07-10T16:30:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b272d1ead34dbe3577d43a27f338e8f3adcf718b201141e28bf43b75d10eb843"}
{"level":"debug","ts":"2026-07-10T16:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97549133834e816804b4c0b2d8708d1fd4511fa72f2fc498bc9b3df9bc05dea0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:31:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:31:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97549133834e816804b4c0b2d8708d1fd4511fa72f2fc498bc9b3df9bc05dea0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97549133834e816804b4c0b2d8708d1fd4511fa72f2fc498bc9b3df9bc05dea0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:31:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:31:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97549133834e816804b4c0b2d8708d1fd4511fa72f2fc498bc9b3df9bc05dea0"}
{"level":"info","ts":"2026-07-10T16:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97549133834e816804b4c0b2d8708d1fd4511fa72f2fc498bc9b3df9bc05dea0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97549133834e816804b4c0b2d8708d1fd4511fa72f2fc498bc9b3df9bc05dea0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:31:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:31:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-10T16:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"97549133834e816804b4c0b2d8708d1fd4511fa72f2fc498bc9b3df9bc05dea0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"97549133834e816804b4c0b2d8708d1fd4511fa72f2fc498bc9b3df9bc05dea0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T16:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97549133834e816804b4c0b2d8708d1fd4511fa72f2fc498bc9b3df9bc05dea0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97549133834e816804b4c0b2d8708d1fd4511fa72f2fc498bc9b3df9bc05dea0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97549133834e816804b4c0b2d8708d1fd4511fa72f2fc498bc9b3df9bc05dea0"}
{"level":"info","ts":"2026-07-10T16:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97549133834e816804b4c0b2d8708d1fd4511fa72f2fc498bc9b3df9bc05dea0"}
{"level":"debug","ts":"2026-07-10T16:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f82f20d238e2ca215eff3d03db3f776b2de4f33dd8ec5567b7ccd28186e798a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:31:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:31:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f82f20d238e2ca215eff3d03db3f776b2de4f33dd8ec5567b7ccd28186e798a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f82f20d238e2ca215eff3d03db3f776b2de4f33dd8ec5567b7ccd28186e798a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97549133834e816804b4c0b2d8708d1fd4511fa72f2fc498bc9b3df9bc05dea0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:31:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:31:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["97549133834e816804b4c0b2d8708d1fd4511fa72f2fc498bc9b3df9bc05dea0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f82f20d238e2ca215eff3d03db3f776b2de4f33dd8ec5567b7ccd28186e798a2"}
{"level":"info","ts":"2026-07-10T16:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97549133834e816804b4c0b2d8708d1fd4511fa72f2fc498bc9b3df9bc05dea0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f82f20d238e2ca215eff3d03db3f776b2de4f33dd8ec5567b7ccd28186e798a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97549133834e816804b4c0b2d8708d1fd4511fa72f2fc498bc9b3df9bc05dea0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f82f20d238e2ca215eff3d03db3f776b2de4f33dd8ec5567b7ccd28186e798a2"}
{"level":"debug","ts":"2026-07-10T16:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f82f20d238e2ca215eff3d03db3f776b2de4f33dd8ec5567b7ccd28186e798a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:31:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:31:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f82f20d238e2ca215eff3d03db3f776b2de4f33dd8ec5567b7ccd28186e798a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f82f20d238e2ca215eff3d03db3f776b2de4f33dd8ec5567b7ccd28186e798a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f82f20d238e2ca215eff3d03db3f776b2de4f33dd8ec5567b7ccd28186e798a2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97549133834e816804b4c0b2d8708d1fd4511fa72f2fc498bc9b3df9bc05dea0"}
{"level":"info","ts":"2026-07-10T16:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f82f20d238e2ca215eff3d03db3f776b2de4f33dd8ec5567b7ccd28186e798a2"}
{"level":"debug","ts":"2026-07-10T16:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02f1569c9c8fdf9dac943860abec7078922d76e38a7f8a8fc5f30f2cb3a75043","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:31:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:31:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02f1569c9c8fdf9dac943860abec7078922d76e38a7f8a8fc5f30f2cb3a75043","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02f1569c9c8fdf9dac943860abec7078922d76e38a7f8a8fc5f30f2cb3a75043","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02f1569c9c8fdf9dac943860abec7078922d76e38a7f8a8fc5f30f2cb3a75043"}
{"level":"debug","ts":"2026-07-10T16:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02f1569c9c8fdf9dac943860abec7078922d76e38a7f8a8fc5f30f2cb3a75043","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02f1569c9c8fdf9dac943860abec7078922d76e38a7f8a8fc5f30f2cb3a75043","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02f1569c9c8fdf9dac943860abec7078922d76e38a7f8a8fc5f30f2cb3a75043"}
{"level":"debug","ts":"2026-07-10T16:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02f1569c9c8fdf9dac943860abec7078922d76e38a7f8a8fc5f30f2cb3a75043","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:31:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:31:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02f1569c9c8fdf9dac943860abec7078922d76e38a7f8a8fc5f30f2cb3a75043"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02f1569c9c8fdf9dac943860abec7078922d76e38a7f8a8fc5f30f2cb3a75043","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49288de2e91895c8cb571310291a6374e96654bad43be5e7ddbfc69af1777275","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:31:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:31:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49288de2e91895c8cb571310291a6374e96654bad43be5e7ddbfc69af1777275","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02f1569c9c8fdf9dac943860abec7078922d76e38a7f8a8fc5f30f2cb3a75043","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49288de2e91895c8cb571310291a6374e96654bad43be5e7ddbfc69af1777275","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49288de2e91895c8cb571310291a6374e96654bad43be5e7ddbfc69af1777275"}
{"level":"debug","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49288de2e91895c8cb571310291a6374e96654bad43be5e7ddbfc69af1777275","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:31:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:31:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["49288de2e91895c8cb571310291a6374e96654bad43be5e7ddbfc69af1777275"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49288de2e91895c8cb571310291a6374e96654bad43be5e7ddbfc69af1777275","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49288de2e91895c8cb571310291a6374e96654bad43be5e7ddbfc69af1777275","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02f1569c9c8fdf9dac943860abec7078922d76e38a7f8a8fc5f30f2cb3a75043"}
{"level":"info","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49288de2e91895c8cb571310291a6374e96654bad43be5e7ddbfc69af1777275"}
{"level":"debug","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d4a47da995c7d418ec2b71e21d74476f338b748a9ae57a867ac020ec567e3da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:31:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:31:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d4a47da995c7d418ec2b71e21d74476f338b748a9ae57a867ac020ec567e3da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"10687a55bf38040f7d46c92b35973e86d00e09ee9c0e91739c7f984e118ebdb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:31:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:31:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d4a47da995c7d418ec2b71e21d74476f338b748a9ae57a867ac020ec567e3da"}
{"level":"info","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"10687a55bf38040f7d46c92b35973e86d00e09ee9c0e91739c7f984e118ebdb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d4a47da995c7d418ec2b71e21d74476f338b748a9ae57a867ac020ec567e3da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:31:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:31:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0d4a47da995c7d418ec2b71e21d74476f338b748a9ae57a867ac020ec567e3da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/10687a55bf38040f7d46c92b35973e86d00e09ee9c0e91739c7f984e118ebdb1"}
{"level":"info","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d4a47da995c7d418ec2b71e21d74476f338b748a9ae57a867ac020ec567e3da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"10687a55bf38040f7d46c92b35973e86d00e09ee9c0e91739c7f984e118ebdb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:31:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:31:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["10687a55bf38040f7d46c92b35973e86d00e09ee9c0e91739c7f984e118ebdb1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d4a47da995c7d418ec2b71e21d74476f338b748a9ae57a867ac020ec567e3da"}
{"level":"info","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"10687a55bf38040f7d46c92b35973e86d00e09ee9c0e91739c7f984e118ebdb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d4a47da995c7d418ec2b71e21d74476f338b748a9ae57a867ac020ec567e3da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"10687a55bf38040f7d46c92b35973e86d00e09ee9c0e91739c7f984e118ebdb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:31:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:31:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"10687a55bf38040f7d46c92b35973e86d00e09ee9c0e91739c7f984e118ebdb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"10687a55bf38040f7d46c92b35973e86d00e09ee9c0e91739c7f984e118ebdb1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/10687a55bf38040f7d46c92b35973e86d00e09ee9c0e91739c7f984e118ebdb1"}
{"level":"debug","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"10687a55bf38040f7d46c92b35973e86d00e09ee9c0e91739c7f984e118ebdb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:31:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:31:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["10687a55bf38040f7d46c92b35973e86d00e09ee9c0e91739c7f984e118ebdb1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"10687a55bf38040f7d46c92b35973e86d00e09ee9c0e91739c7f984e118ebdb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aec9ec4346ad34e55c9003652b354c9dbd79b0cdfe1f5141710e482a08090c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:31:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:31:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d4a47da995c7d418ec2b71e21d74476f338b748a9ae57a867ac020ec567e3da"}
{"level":"info","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aec9ec4346ad34e55c9003652b354c9dbd79b0cdfe1f5141710e482a08090c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"10687a55bf38040f7d46c92b35973e86d00e09ee9c0e91739c7f984e118ebdb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:31:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:31:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/10687a55bf38040f7d46c92b35973e86d00e09ee9c0e91739c7f984e118ebdb1"}
{"level":"info","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"10687a55bf38040f7d46c92b35973e86d00e09ee9c0e91739c7f984e118ebdb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"919d6ba662e389306a331f050539957c9ef7fd4662e67a8a561d57eb18cfccfb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:31:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:31:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"919d6ba662e389306a331f050539957c9ef7fd4662e67a8a561d57eb18cfccfb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aec9ec4346ad34e55c9003652b354c9dbd79b0cdfe1f5141710e482a08090c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:31:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:31:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aec9ec4346ad34e55c9003652b354c9dbd79b0cdfe1f5141710e482a08090c6"}
{"level":"info","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aec9ec4346ad34e55c9003652b354c9dbd79b0cdfe1f5141710e482a08090c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"10687a55bf38040f7d46c92b35973e86d00e09ee9c0e91739c7f984e118ebdb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:31:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:31:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["10687a55bf38040f7d46c92b35973e86d00e09ee9c0e91739c7f984e118ebdb1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/919d6ba662e389306a331f050539957c9ef7fd4662e67a8a561d57eb18cfccfb"}
{"level":"info","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"10687a55bf38040f7d46c92b35973e86d00e09ee9c0e91739c7f984e118ebdb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"919d6ba662e389306a331f050539957c9ef7fd4662e67a8a561d57eb18cfccfb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:31:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:31:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["919d6ba662e389306a331f050539957c9ef7fd4662e67a8a561d57eb18cfccfb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"919d6ba662e389306a331f050539957c9ef7fd4662e67a8a561d57eb18cfccfb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aec9ec4346ad34e55c9003652b354c9dbd79b0cdfe1f5141710e482a08090c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:31:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:31:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7aec9ec4346ad34e55c9003652b354c9dbd79b0cdfe1f5141710e482a08090c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/10687a55bf38040f7d46c92b35973e86d00e09ee9c0e91739c7f984e118ebdb1"}
{"level":"info","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aec9ec4346ad34e55c9003652b354c9dbd79b0cdfe1f5141710e482a08090c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"10687a55bf38040f7d46c92b35973e86d00e09ee9c0e91739c7f984e118ebdb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"919d6ba662e389306a331f050539957c9ef7fd4662e67a8a561d57eb18cfccfb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aec9ec4346ad34e55c9003652b354c9dbd79b0cdfe1f5141710e482a08090c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:31:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:31:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aec9ec4346ad34e55c9003652b354c9dbd79b0cdfe1f5141710e482a08090c6"}
{"level":"info","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aec9ec4346ad34e55c9003652b354c9dbd79b0cdfe1f5141710e482a08090c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aec9ec4346ad34e55c9003652b354c9dbd79b0cdfe1f5141710e482a08090c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:31:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:31:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7aec9ec4346ad34e55c9003652b354c9dbd79b0cdfe1f5141710e482a08090c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aec9ec4346ad34e55c9003652b354c9dbd79b0cdfe1f5141710e482a08090c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aec9ec4346ad34e55c9003652b354c9dbd79b0cdfe1f5141710e482a08090c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:31:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:31:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7aec9ec4346ad34e55c9003652b354c9dbd79b0cdfe1f5141710e482a08090c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/919d6ba662e389306a331f050539957c9ef7fd4662e67a8a561d57eb18cfccfb"}
{"level":"error","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7aec9ec4346ad34e55c9003652b354c9dbd79b0cdfe1f5141710e482a08090c6","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7aec9ec4346ad34e55c9003652b354c9dbd79b0cdfe1f5141710e482a08090c6\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7aec9ec4346ad34e55c9003652b354c9dbd79b0cdfe1f5141710e482a08090c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7aec9ec4346ad34e55c9003652b354c9dbd79b0cdfe1f5141710e482a08090c6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/10687a55bf38040f7d46c92b35973e86d00e09ee9c0e91739c7f984e118ebdb1"}
{"level":"info","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aec9ec4346ad34e55c9003652b354c9dbd79b0cdfe1f5141710e482a08090c6"}
{"level":"debug","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7721743ad43c20bb21e8bfc1f5884927cdb097bfbb99562ebf2df3758f664b96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:31:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:31:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7721743ad43c20bb21e8bfc1f5884927cdb097bfbb99562ebf2df3758f664b96","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c59907e6cefa2f2dcc34c9b8f4a71216b86b8f3c55813a52fb02e8a9cb350fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:31:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:31:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7721743ad43c20bb21e8bfc1f5884927cdb097bfbb99562ebf2df3758f664b96"}
{"level":"info","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c59907e6cefa2f2dcc34c9b8f4a71216b86b8f3c55813a52fb02e8a9cb350fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7721743ad43c20bb21e8bfc1f5884927cdb097bfbb99562ebf2df3758f664b96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:31:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:31:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7721743ad43c20bb21e8bfc1f5884927cdb097bfbb99562ebf2df3758f664b96"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c59907e6cefa2f2dcc34c9b8f4a71216b86b8f3c55813a52fb02e8a9cb350fc"}
{"level":"info","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7721743ad43c20bb21e8bfc1f5884927cdb097bfbb99562ebf2df3758f664b96","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c59907e6cefa2f2dcc34c9b8f4a71216b86b8f3c55813a52fb02e8a9cb350fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:31:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:31:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7c59907e6cefa2f2dcc34c9b8f4a71216b86b8f3c55813a52fb02e8a9cb350fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c59907e6cefa2f2dcc34c9b8f4a71216b86b8f3c55813a52fb02e8a9cb350fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7721743ad43c20bb21e8bfc1f5884927cdb097bfbb99562ebf2df3758f664b96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:31:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:31:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7721743ad43c20bb21e8bfc1f5884927cdb097bfbb99562ebf2df3758f664b96"}
{"level":"info","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7721743ad43c20bb21e8bfc1f5884927cdb097bfbb99562ebf2df3758f664b96","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c59907e6cefa2f2dcc34c9b8f4a71216b86b8f3c55813a52fb02e8a9cb350fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:31:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:31:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c59907e6cefa2f2dcc34c9b8f4a71216b86b8f3c55813a52fb02e8a9cb350fc"}
{"level":"info","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c59907e6cefa2f2dcc34c9b8f4a71216b86b8f3c55813a52fb02e8a9cb350fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7721743ad43c20bb21e8bfc1f5884927cdb097bfbb99562ebf2df3758f664b96","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c59907e6cefa2f2dcc34c9b8f4a71216b86b8f3c55813a52fb02e8a9cb350fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:31:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:31:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7c59907e6cefa2f2dcc34c9b8f4a71216b86b8f3c55813a52fb02e8a9cb350fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c59907e6cefa2f2dcc34c9b8f4a71216b86b8f3c55813a52fb02e8a9cb350fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7721743ad43c20bb21e8bfc1f5884927cdb097bfbb99562ebf2df3758f664b96","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c59907e6cefa2f2dcc34c9b8f4a71216b86b8f3c55813a52fb02e8a9cb350fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:31:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:31:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7c59907e6cefa2f2dcc34c9b8f4a71216b86b8f3c55813a52fb02e8a9cb350fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7721743ad43c20bb21e8bfc1f5884927cdb097bfbb99562ebf2df3758f664b96"}
{"level":"error","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7c59907e6cefa2f2dcc34c9b8f4a71216b86b8f3c55813a52fb02e8a9cb350fc","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7c59907e6cefa2f2dcc34c9b8f4a71216b86b8f3c55813a52fb02e8a9cb350fc\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e49051792b57df5810fde9b861812a25231a47623393de5f45505cc93d8fbc54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:31:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:31:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e49051792b57df5810fde9b861812a25231a47623393de5f45505cc93d8fbc54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c59907e6cefa2f2dcc34c9b8f4a71216b86b8f3c55813a52fb02e8a9cb350fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:31:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:31:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c59907e6cefa2f2dcc34c9b8f4a71216b86b8f3c55813a52fb02e8a9cb350fc"}
{"level":"info","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c59907e6cefa2f2dcc34c9b8f4a71216b86b8f3c55813a52fb02e8a9cb350fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b85944d46cb0fc25a732050670e3c03c485e9f3366f7b98af2162775b3fd965","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:31:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:31:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e49051792b57df5810fde9b861812a25231a47623393de5f45505cc93d8fbc54"}
{"level":"info","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b85944d46cb0fc25a732050670e3c03c485e9f3366f7b98af2162775b3fd965","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7721743ad43c20bb21e8bfc1f5884927cdb097bfbb99562ebf2df3758f664b96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:31:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:31:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7721743ad43c20bb21e8bfc1f5884927cdb097bfbb99562ebf2df3758f664b96"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b85944d46cb0fc25a732050670e3c03c485e9f3366f7b98af2162775b3fd965"}
{"level":"info","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7721743ad43c20bb21e8bfc1f5884927cdb097bfbb99562ebf2df3758f664b96","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e49051792b57df5810fde9b861812a25231a47623393de5f45505cc93d8fbc54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:31:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:31:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e49051792b57df5810fde9b861812a25231a47623393de5f45505cc93d8fbc54"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e49051792b57df5810fde9b861812a25231a47623393de5f45505cc93d8fbc54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c59907e6cefa2f2dcc34c9b8f4a71216b86b8f3c55813a52fb02e8a9cb350fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b85944d46cb0fc25a732050670e3c03c485e9f3366f7b98af2162775b3fd965","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:31:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:31:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9b85944d46cb0fc25a732050670e3c03c485e9f3366f7b98af2162775b3fd965"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c59907e6cefa2f2dcc34c9b8f4a71216b86b8f3c55813a52fb02e8a9cb350fc"}
{"level":"info","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b85944d46cb0fc25a732050670e3c03c485e9f3366f7b98af2162775b3fd965","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7721743ad43c20bb21e8bfc1f5884927cdb097bfbb99562ebf2df3758f664b96","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e49051792b57df5810fde9b861812a25231a47623393de5f45505cc93d8fbc54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b85944d46cb0fc25a732050670e3c03c485e9f3366f7b98af2162775b3fd965","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:31:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:31:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b85944d46cb0fc25a732050670e3c03c485e9f3366f7b98af2162775b3fd965"}
{"level":"info","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b85944d46cb0fc25a732050670e3c03c485e9f3366f7b98af2162775b3fd965","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c59907e6cefa2f2dcc34c9b8f4a71216b86b8f3c55813a52fb02e8a9cb350fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:31:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:31:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7c59907e6cefa2f2dcc34c9b8f4a71216b86b8f3c55813a52fb02e8a9cb350fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7721743ad43c20bb21e8bfc1f5884927cdb097bfbb99562ebf2df3758f664b96"}
{"level":"info","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c59907e6cefa2f2dcc34c9b8f4a71216b86b8f3c55813a52fb02e8a9cb350fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b85944d46cb0fc25a732050670e3c03c485e9f3366f7b98af2162775b3fd965","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:31:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:31:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9b85944d46cb0fc25a732050670e3c03c485e9f3366f7b98af2162775b3fd965"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b85944d46cb0fc25a732050670e3c03c485e9f3366f7b98af2162775b3fd965","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c59907e6cefa2f2dcc34c9b8f4a71216b86b8f3c55813a52fb02e8a9cb350fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b85944d46cb0fc25a732050670e3c03c485e9f3366f7b98af2162775b3fd965","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e49051792b57df5810fde9b861812a25231a47623393de5f45505cc93d8fbc54"}
{"level":"info","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b85944d46cb0fc25a732050670e3c03c485e9f3366f7b98af2162775b3fd965"}
{"level":"info","ts":"2026-07-10T16:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c59907e6cefa2f2dcc34c9b8f4a71216b86b8f3c55813a52fb02e8a9cb350fc"}
{"level":"debug","ts":"2026-07-10T16:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef1dd449a32928afd02c55b09ca8634554655e48b09b1037f7b53ff85d88f687","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:32:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:32:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef1dd449a32928afd02c55b09ca8634554655e48b09b1037f7b53ff85d88f687","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef1dd449a32928afd02c55b09ca8634554655e48b09b1037f7b53ff85d88f687","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:32:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:32:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef1dd449a32928afd02c55b09ca8634554655e48b09b1037f7b53ff85d88f687"}
{"level":"info","ts":"2026-07-10T16:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef1dd449a32928afd02c55b09ca8634554655e48b09b1037f7b53ff85d88f687","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef1dd449a32928afd02c55b09ca8634554655e48b09b1037f7b53ff85d88f687","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:32:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:32:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-10T16:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ef1dd449a32928afd02c55b09ca8634554655e48b09b1037f7b53ff85d88f687","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ef1dd449a32928afd02c55b09ca8634554655e48b09b1037f7b53ff85d88f687\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T16:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef1dd449a32928afd02c55b09ca8634554655e48b09b1037f7b53ff85d88f687","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef1dd449a32928afd02c55b09ca8634554655e48b09b1037f7b53ff85d88f687","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef1dd449a32928afd02c55b09ca8634554655e48b09b1037f7b53ff85d88f687"}
{"level":"info","ts":"2026-07-10T16:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef1dd449a32928afd02c55b09ca8634554655e48b09b1037f7b53ff85d88f687"}
{"level":"debug","ts":"2026-07-10T16:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef1dd449a32928afd02c55b09ca8634554655e48b09b1037f7b53ff85d88f687","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:32:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:32:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef1dd449a32928afd02c55b09ca8634554655e48b09b1037f7b53ff85d88f687"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef1dd449a32928afd02c55b09ca8634554655e48b09b1037f7b53ff85d88f687","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef1dd449a32928afd02c55b09ca8634554655e48b09b1037f7b53ff85d88f687","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:32:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:32:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef1dd449a32928afd02c55b09ca8634554655e48b09b1037f7b53ff85d88f687","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef1dd449a32928afd02c55b09ca8634554655e48b09b1037f7b53ff85d88f687","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef1dd449a32928afd02c55b09ca8634554655e48b09b1037f7b53ff85d88f687","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef1dd449a32928afd02c55b09ca8634554655e48b09b1037f7b53ff85d88f687"}
{"level":"debug","ts":"2026-07-10T16:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef1dd449a32928afd02c55b09ca8634554655e48b09b1037f7b53ff85d88f687","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef1dd449a32928afd02c55b09ca8634554655e48b09b1037f7b53ff85d88f687"}
{"level":"debug","ts":"2026-07-10T16:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c526abf7f59802806f8ea5df17805b13a6cabe2b6b9dcaf3d04063a9b03f5e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:32:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:32:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c526abf7f59802806f8ea5df17805b13a6cabe2b6b9dcaf3d04063a9b03f5e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c526abf7f59802806f8ea5df17805b13a6cabe2b6b9dcaf3d04063a9b03f5e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c526abf7f59802806f8ea5df17805b13a6cabe2b6b9dcaf3d04063a9b03f5e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef1dd449a32928afd02c55b09ca8634554655e48b09b1037f7b53ff85d88f687","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:32:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:32:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef1dd449a32928afd02c55b09ca8634554655e48b09b1037f7b53ff85d88f687"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c526abf7f59802806f8ea5df17805b13a6cabe2b6b9dcaf3d04063a9b03f5e7"}
{"level":"info","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef1dd449a32928afd02c55b09ca8634554655e48b09b1037f7b53ff85d88f687","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef1dd449a32928afd02c55b09ca8634554655e48b09b1037f7b53ff85d88f687","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c526abf7f59802806f8ea5df17805b13a6cabe2b6b9dcaf3d04063a9b03f5e7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c526abf7f59802806f8ea5df17805b13a6cabe2b6b9dcaf3d04063a9b03f5e7"}
{"level":"info","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef1dd449a32928afd02c55b09ca8634554655e48b09b1037f7b53ff85d88f687"}
{"level":"debug","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c526abf7f59802806f8ea5df17805b13a6cabe2b6b9dcaf3d04063a9b03f5e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:32:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:32:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c526abf7f59802806f8ea5df17805b13a6cabe2b6b9dcaf3d04063a9b03f5e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c526abf7f59802806f8ea5df17805b13a6cabe2b6b9dcaf3d04063a9b03f5e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c526abf7f59802806f8ea5df17805b13a6cabe2b6b9dcaf3d04063a9b03f5e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:32:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:32:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c526abf7f59802806f8ea5df17805b13a6cabe2b6b9dcaf3d04063a9b03f5e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e838baba826e016bf3e907ef3289699aedfd7707968047696d2bc8d7dffeb8b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:32:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:32:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c526abf7f59802806f8ea5df17805b13a6cabe2b6b9dcaf3d04063a9b03f5e7"}
{"level":"info","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e838baba826e016bf3e907ef3289699aedfd7707968047696d2bc8d7dffeb8b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c526abf7f59802806f8ea5df17805b13a6cabe2b6b9dcaf3d04063a9b03f5e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:32:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:32:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c526abf7f59802806f8ea5df17805b13a6cabe2b6b9dcaf3d04063a9b03f5e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e838baba826e016bf3e907ef3289699aedfd7707968047696d2bc8d7dffeb8b7"}
{"level":"info","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c526abf7f59802806f8ea5df17805b13a6cabe2b6b9dcaf3d04063a9b03f5e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e838baba826e016bf3e907ef3289699aedfd7707968047696d2bc8d7dffeb8b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:32:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:32:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e838baba826e016bf3e907ef3289699aedfd7707968047696d2bc8d7dffeb8b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c526abf7f59802806f8ea5df17805b13a6cabe2b6b9dcaf3d04063a9b03f5e7"}
{"level":"info","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e838baba826e016bf3e907ef3289699aedfd7707968047696d2bc8d7dffeb8b7"}
{"level":"info","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e838baba826e016bf3e907ef3289699aedfd7707968047696d2bc8d7dffeb8b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c526abf7f59802806f8ea5df17805b13a6cabe2b6b9dcaf3d04063a9b03f5e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:32:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:32:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c526abf7f59802806f8ea5df17805b13a6cabe2b6b9dcaf3d04063a9b03f5e7"}
{"level":"info","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c526abf7f59802806f8ea5df17805b13a6cabe2b6b9dcaf3d04063a9b03f5e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e838baba826e016bf3e907ef3289699aedfd7707968047696d2bc8d7dffeb8b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:32:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:32:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e838baba826e016bf3e907ef3289699aedfd7707968047696d2bc8d7dffeb8b7"}
{"level":"info","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c526abf7f59802806f8ea5df17805b13a6cabe2b6b9dcaf3d04063a9b03f5e7"}
{"level":"info","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e838baba826e016bf3e907ef3289699aedfd7707968047696d2bc8d7dffeb8b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c526abf7f59802806f8ea5df17805b13a6cabe2b6b9dcaf3d04063a9b03f5e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:32:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:32:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c526abf7f59802806f8ea5df17805b13a6cabe2b6b9dcaf3d04063a9b03f5e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e838baba826e016bf3e907ef3289699aedfd7707968047696d2bc8d7dffeb8b7"}
{"level":"info","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c526abf7f59802806f8ea5df17805b13a6cabe2b6b9dcaf3d04063a9b03f5e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e838baba826e016bf3e907ef3289699aedfd7707968047696d2bc8d7dffeb8b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:32:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:32:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e838baba826e016bf3e907ef3289699aedfd7707968047696d2bc8d7dffeb8b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c526abf7f59802806f8ea5df17805b13a6cabe2b6b9dcaf3d04063a9b03f5e7"}
{"level":"info","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e838baba826e016bf3e907ef3289699aedfd7707968047696d2bc8d7dffeb8b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c526abf7f59802806f8ea5df17805b13a6cabe2b6b9dcaf3d04063a9b03f5e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e838baba826e016bf3e907ef3289699aedfd7707968047696d2bc8d7dffeb8b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6fd78ced12fb7fe5878b0499cc2cce853f4e0a70c2662564511ce4f0aeb0143","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:32:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:32:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e838baba826e016bf3e907ef3289699aedfd7707968047696d2bc8d7dffeb8b7"}
{"level":"info","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6fd78ced12fb7fe5878b0499cc2cce853f4e0a70c2662564511ce4f0aeb0143"}
{"level":"info","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6fd78ced12fb7fe5878b0499cc2cce853f4e0a70c2662564511ce4f0aeb0143","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6fd78ced12fb7fe5878b0499cc2cce853f4e0a70c2662564511ce4f0aeb0143","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:32:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:32:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6fd78ced12fb7fe5878b0499cc2cce853f4e0a70c2662564511ce4f0aeb0143"}
{"level":"info","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6fd78ced12fb7fe5878b0499cc2cce853f4e0a70c2662564511ce4f0aeb0143","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6fd78ced12fb7fe5878b0499cc2cce853f4e0a70c2662564511ce4f0aeb0143","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:32:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:32:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6fd78ced12fb7fe5878b0499cc2cce853f4e0a70c2662564511ce4f0aeb0143"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b6fd78ced12fb7fe5878b0499cc2cce853f4e0a70c2662564511ce4f0aeb0143","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b6fd78ced12fb7fe5878b0499cc2cce853f4e0a70c2662564511ce4f0aeb0143\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6fd78ced12fb7fe5878b0499cc2cce853f4e0a70c2662564511ce4f0aeb0143","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6fd78ced12fb7fe5878b0499cc2cce853f4e0a70c2662564511ce4f0aeb0143"}
{"level":"debug","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6fd78ced12fb7fe5878b0499cc2cce853f4e0a70c2662564511ce4f0aeb0143","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:32:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:32:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6fd78ced12fb7fe5878b0499cc2cce853f4e0a70c2662564511ce4f0aeb0143"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6fd78ced12fb7fe5878b0499cc2cce853f4e0a70c2662564511ce4f0aeb0143","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c62b27c9470bfdfc4caba8c137ed5cf0169117e685fe98c6833c3488f8be200","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:32:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:32:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c62b27c9470bfdfc4caba8c137ed5cf0169117e685fe98c6833c3488f8be200"}
{"level":"info","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c62b27c9470bfdfc4caba8c137ed5cf0169117e685fe98c6833c3488f8be200","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6fd78ced12fb7fe5878b0499cc2cce853f4e0a70c2662564511ce4f0aeb0143","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:32:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:32:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6fd78ced12fb7fe5878b0499cc2cce853f4e0a70c2662564511ce4f0aeb0143","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c62b27c9470bfdfc4caba8c137ed5cf0169117e685fe98c6833c3488f8be200","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:32:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:32:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c62b27c9470bfdfc4caba8c137ed5cf0169117e685fe98c6833c3488f8be200"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6fd78ced12fb7fe5878b0499cc2cce853f4e0a70c2662564511ce4f0aeb0143"}
{"level":"info","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c62b27c9470bfdfc4caba8c137ed5cf0169117e685fe98c6833c3488f8be200","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6fd78ced12fb7fe5878b0499cc2cce853f4e0a70c2662564511ce4f0aeb0143","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:32:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:32:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6fd78ced12fb7fe5878b0499cc2cce853f4e0a70c2662564511ce4f0aeb0143"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c62b27c9470bfdfc4caba8c137ed5cf0169117e685fe98c6833c3488f8be200"}
{"level":"info","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6fd78ced12fb7fe5878b0499cc2cce853f4e0a70c2662564511ce4f0aeb0143","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c62b27c9470bfdfc4caba8c137ed5cf0169117e685fe98c6833c3488f8be200","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6fd78ced12fb7fe5878b0499cc2cce853f4e0a70c2662564511ce4f0aeb0143","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:32:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:32:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6fd78ced12fb7fe5878b0499cc2cce853f4e0a70c2662564511ce4f0aeb0143","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6fd78ced12fb7fe5878b0499cc2cce853f4e0a70c2662564511ce4f0aeb0143","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6fd78ced12fb7fe5878b0499cc2cce853f4e0a70c2662564511ce4f0aeb0143"}
{"level":"debug","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6fd78ced12fb7fe5878b0499cc2cce853f4e0a70c2662564511ce4f0aeb0143","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:32:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:32:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6fd78ced12fb7fe5878b0499cc2cce853f4e0a70c2662564511ce4f0aeb0143"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6fd78ced12fb7fe5878b0499cc2cce853f4e0a70c2662564511ce4f0aeb0143","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a0fccad80243c0c018c2a9c25a9dabbaaae03275c33c03b9dc00833c7e57491","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:32:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:32:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c62b27c9470bfdfc4caba8c137ed5cf0169117e685fe98c6833c3488f8be200"}
{"level":"info","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a0fccad80243c0c018c2a9c25a9dabbaaae03275c33c03b9dc00833c7e57491","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6fd78ced12fb7fe5878b0499cc2cce853f4e0a70c2662564511ce4f0aeb0143","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:32:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:32:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6fd78ced12fb7fe5878b0499cc2cce853f4e0a70c2662564511ce4f0aeb0143"}
{"level":"info","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6fd78ced12fb7fe5878b0499cc2cce853f4e0a70c2662564511ce4f0aeb0143","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a0fccad80243c0c018c2a9c25a9dabbaaae03275c33c03b9dc00833c7e57491","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:32:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:32:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a0fccad80243c0c018c2a9c25a9dabbaaae03275c33c03b9dc00833c7e57491"}
{"level":"info","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a0fccad80243c0c018c2a9c25a9dabbaaae03275c33c03b9dc00833c7e57491","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6fd78ced12fb7fe5878b0499cc2cce853f4e0a70c2662564511ce4f0aeb0143","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a0fccad80243c0c018c2a9c25a9dabbaaae03275c33c03b9dc00833c7e57491","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:32:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:32:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1a0fccad80243c0c018c2a9c25a9dabbaaae03275c33c03b9dc00833c7e57491"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a0fccad80243c0c018c2a9c25a9dabbaaae03275c33c03b9dc00833c7e57491","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6fd78ced12fb7fe5878b0499cc2cce853f4e0a70c2662564511ce4f0aeb0143","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a0fccad80243c0c018c2a9c25a9dabbaaae03275c33c03b9dc00833c7e57491","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:32:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:32:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1a0fccad80243c0c018c2a9c25a9dabbaaae03275c33c03b9dc00833c7e57491"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6fd78ced12fb7fe5878b0499cc2cce853f4e0a70c2662564511ce4f0aeb0143"}
{"level":"error","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1a0fccad80243c0c018c2a9c25a9dabbaaae03275c33c03b9dc00833c7e57491","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1a0fccad80243c0c018c2a9c25a9dabbaaae03275c33c03b9dc00833c7e57491\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a0fccad80243c0c018c2a9c25a9dabbaaae03275c33c03b9dc00833c7e57491","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:32:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:32:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a0fccad80243c0c018c2a9c25a9dabbaaae03275c33c03b9dc00833c7e57491"}
{"level":"info","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a0fccad80243c0c018c2a9c25a9dabbaaae03275c33c03b9dc00833c7e57491","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9820940ea561ac7233f172e32ee5331166ec7b68699ae5eb20ae3735d956d6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:32:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:32:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9820940ea561ac7233f172e32ee5331166ec7b68699ae5eb20ae3735d956d6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6fd78ced12fb7fe5878b0499cc2cce853f4e0a70c2662564511ce4f0aeb0143","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:32:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:32:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6fd78ced12fb7fe5878b0499cc2cce853f4e0a70c2662564511ce4f0aeb0143"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9820940ea561ac7233f172e32ee5331166ec7b68699ae5eb20ae3735d956d6c"}
{"level":"info","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6fd78ced12fb7fe5878b0499cc2cce853f4e0a70c2662564511ce4f0aeb0143","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a0fccad80243c0c018c2a9c25a9dabbaaae03275c33c03b9dc00833c7e57491","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9820940ea561ac7233f172e32ee5331166ec7b68699ae5eb20ae3735d956d6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:32:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:32:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d9820940ea561ac7233f172e32ee5331166ec7b68699ae5eb20ae3735d956d6c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9820940ea561ac7233f172e32ee5331166ec7b68699ae5eb20ae3735d956d6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6fd78ced12fb7fe5878b0499cc2cce853f4e0a70c2662564511ce4f0aeb0143","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9820940ea561ac7233f172e32ee5331166ec7b68699ae5eb20ae3735d956d6c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a0fccad80243c0c018c2a9c25a9dabbaaae03275c33c03b9dc00833c7e57491"}
{"level":"debug","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a0fccad80243c0c018c2a9c25a9dabbaaae03275c33c03b9dc00833c7e57491","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:32:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:32:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1a0fccad80243c0c018c2a9c25a9dabbaaae03275c33c03b9dc00833c7e57491"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a0fccad80243c0c018c2a9c25a9dabbaaae03275c33c03b9dc00833c7e57491","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a0fccad80243c0c018c2a9c25a9dabbaaae03275c33c03b9dc00833c7e57491","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9820940ea561ac7233f172e32ee5331166ec7b68699ae5eb20ae3735d956d6c"}
{"level":"debug","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a5c276c68701b91aa220d9445d305e58706ac1451887ccb2873ccfb5b643af6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:32:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:32:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6fd78ced12fb7fe5878b0499cc2cce853f4e0a70c2662564511ce4f0aeb0143"}
{"level":"info","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a5c276c68701b91aa220d9445d305e58706ac1451887ccb2873ccfb5b643af6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a5c276c68701b91aa220d9445d305e58706ac1451887ccb2873ccfb5b643af6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a5c276c68701b91aa220d9445d305e58706ac1451887ccb2873ccfb5b643af6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a0fccad80243c0c018c2a9c25a9dabbaaae03275c33c03b9dc00833c7e57491"}
{"level":"debug","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a5c276c68701b91aa220d9445d305e58706ac1451887ccb2873ccfb5b643af6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:32:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:32:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a5c276c68701b91aa220d9445d305e58706ac1451887ccb2873ccfb5b643af6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a5c276c68701b91aa220d9445d305e58706ac1451887ccb2873ccfb5b643af6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a5c276c68701b91aa220d9445d305e58706ac1451887ccb2873ccfb5b643af6"}
{"level":"info","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a5c276c68701b91aa220d9445d305e58706ac1451887ccb2873ccfb5b643af6"}
{"level":"debug","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a5c276c68701b91aa220d9445d305e58706ac1451887ccb2873ccfb5b643af6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:32:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:32:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9a5c276c68701b91aa220d9445d305e58706ac1451887ccb2873ccfb5b643af6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a5c276c68701b91aa220d9445d305e58706ac1451887ccb2873ccfb5b643af6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4d4dde8d7b0b060a795199bce118d3c8ae07e8bd4d90c410d8750c964ae55a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:32:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:32:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4d4dde8d7b0b060a795199bce118d3c8ae07e8bd4d90c410d8750c964ae55a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a5c276c68701b91aa220d9445d305e58706ac1451887ccb2873ccfb5b643af6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4d4dde8d7b0b060a795199bce118d3c8ae07e8bd4d90c410d8750c964ae55a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4d4dde8d7b0b060a795199bce118d3c8ae07e8bd4d90c410d8750c964ae55a4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4d4dde8d7b0b060a795199bce118d3c8ae07e8bd4d90c410d8750c964ae55a4"}
{"level":"debug","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4d4dde8d7b0b060a795199bce118d3c8ae07e8bd4d90c410d8750c964ae55a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:32:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:32:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4d4dde8d7b0b060a795199bce118d3c8ae07e8bd4d90c410d8750c964ae55a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4d4dde8d7b0b060a795199bce118d3c8ae07e8bd4d90c410d8750c964ae55a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4d4dde8d7b0b060a795199bce118d3c8ae07e8bd4d90c410d8750c964ae55a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93c555b1065512c5684811d38f24e050e04f087a711f9950c3b4d132b51540f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:32:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:32:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a5c276c68701b91aa220d9445d305e58706ac1451887ccb2873ccfb5b643af6"}
{"level":"info","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93c555b1065512c5684811d38f24e050e04f087a711f9950c3b4d132b51540f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93c555b1065512c5684811d38f24e050e04f087a711f9950c3b4d132b51540f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93c555b1065512c5684811d38f24e050e04f087a711f9950c3b4d132b51540f2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4d4dde8d7b0b060a795199bce118d3c8ae07e8bd4d90c410d8750c964ae55a4"}
{"level":"debug","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93c555b1065512c5684811d38f24e050e04f087a711f9950c3b4d132b51540f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:32:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:32:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93c555b1065512c5684811d38f24e050e04f087a711f9950c3b4d132b51540f2"}
{"level":"info","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93c555b1065512c5684811d38f24e050e04f087a711f9950c3b4d132b51540f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93c555b1065512c5684811d38f24e050e04f087a711f9950c3b4d132b51540f2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93c555b1065512c5684811d38f24e050e04f087a711f9950c3b4d132b51540f2"}
{"level":"debug","ts":"2026-07-10T16:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93c555b1065512c5684811d38f24e050e04f087a711f9950c3b4d132b51540f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:32:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:32:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["93c555b1065512c5684811d38f24e050e04f087a711f9950c3b4d132b51540f2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93c555b1065512c5684811d38f24e050e04f087a711f9950c3b4d132b51540f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24a7fcea3d451b9ff7a33a5ab5c7f9827757abe694e8ccf0c7163ef67ee4f1de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:32:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:32:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24a7fcea3d451b9ff7a33a5ab5c7f9827757abe694e8ccf0c7163ef67ee4f1de"}
{"level":"info","ts":"2026-07-10T16:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24a7fcea3d451b9ff7a33a5ab5c7f9827757abe694e8ccf0c7163ef67ee4f1de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93c555b1065512c5684811d38f24e050e04f087a711f9950c3b4d132b51540f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:32:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:32:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93c555b1065512c5684811d38f24e050e04f087a711f9950c3b4d132b51540f2"}
{"level":"info","ts":"2026-07-10T16:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93c555b1065512c5684811d38f24e050e04f087a711f9950c3b4d132b51540f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ce5596f8d3ec58f056d4a02f7992ab2e25d909d70fe9b91d7f8fb87468273da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:32:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:32:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ce5596f8d3ec58f056d4a02f7992ab2e25d909d70fe9b91d7f8fb87468273da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24a7fcea3d451b9ff7a33a5ab5c7f9827757abe694e8ccf0c7163ef67ee4f1de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:32:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:32:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["24a7fcea3d451b9ff7a33a5ab5c7f9827757abe694e8ccf0c7163ef67ee4f1de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ce5596f8d3ec58f056d4a02f7992ab2e25d909d70fe9b91d7f8fb87468273da"}
{"level":"info","ts":"2026-07-10T16:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24a7fcea3d451b9ff7a33a5ab5c7f9827757abe694e8ccf0c7163ef67ee4f1de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93c555b1065512c5684811d38f24e050e04f087a711f9950c3b4d132b51540f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:32:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:32:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["93c555b1065512c5684811d38f24e050e04f087a711f9950c3b4d132b51540f2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24a7fcea3d451b9ff7a33a5ab5c7f9827757abe694e8ccf0c7163ef67ee4f1de"}
{"level":"info","ts":"2026-07-10T16:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93c555b1065512c5684811d38f24e050e04f087a711f9950c3b4d132b51540f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ce5596f8d3ec58f056d4a02f7992ab2e25d909d70fe9b91d7f8fb87468273da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:32:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:32:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ce5596f8d3ec58f056d4a02f7992ab2e25d909d70fe9b91d7f8fb87468273da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93c555b1065512c5684811d38f24e050e04f087a711f9950c3b4d132b51540f2"}
{"level":"info","ts":"2026-07-10T16:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ce5596f8d3ec58f056d4a02f7992ab2e25d909d70fe9b91d7f8fb87468273da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24a7fcea3d451b9ff7a33a5ab5c7f9827757abe694e8ccf0c7163ef67ee4f1de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93c555b1065512c5684811d38f24e050e04f087a711f9950c3b4d132b51540f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ce5596f8d3ec58f056d4a02f7992ab2e25d909d70fe9b91d7f8fb87468273da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:32:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:32:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ce5596f8d3ec58f056d4a02f7992ab2e25d909d70fe9b91d7f8fb87468273da"}
{"level":"info","ts":"2026-07-10T16:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ce5596f8d3ec58f056d4a02f7992ab2e25d909d70fe9b91d7f8fb87468273da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ce5596f8d3ec58f056d4a02f7992ab2e25d909d70fe9b91d7f8fb87468273da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:32:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:32:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ce5596f8d3ec58f056d4a02f7992ab2e25d909d70fe9b91d7f8fb87468273da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ce5596f8d3ec58f056d4a02f7992ab2e25d909d70fe9b91d7f8fb87468273da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ce5596f8d3ec58f056d4a02f7992ab2e25d909d70fe9b91d7f8fb87468273da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:32:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:32:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ce5596f8d3ec58f056d4a02f7992ab2e25d909d70fe9b91d7f8fb87468273da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24a7fcea3d451b9ff7a33a5ab5c7f9827757abe694e8ccf0c7163ef67ee4f1de"}
{"level":"error","ts":"2026-07-10T16:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6ce5596f8d3ec58f056d4a02f7992ab2e25d909d70fe9b91d7f8fb87468273da","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6ce5596f8d3ec58f056d4a02f7992ab2e25d909d70fe9b91d7f8fb87468273da\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T16:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ce5596f8d3ec58f056d4a02f7992ab2e25d909d70fe9b91d7f8fb87468273da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ce5596f8d3ec58f056d4a02f7992ab2e25d909d70fe9b91d7f8fb87468273da","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93c555b1065512c5684811d38f24e050e04f087a711f9950c3b4d132b51540f2"}
{"level":"info","ts":"2026-07-10T16:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ce5596f8d3ec58f056d4a02f7992ab2e25d909d70fe9b91d7f8fb87468273da"}
{"level":"info","ts":"2026-07-10T16:32:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f1015e6e-a419-4c13-a9cd-27b5ec745b5c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:36986","PortSpecifier":{"PortValue":36986}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f1015e6e-a419-4c13-a9cd-27b5ec745b5c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-c32d0d.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T16:32:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f1015e6e-a419-4c13-a9cd-27b5ec745b5c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:36986","PortSpecifier":{"PortValue":36986}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783701131,"nanos":225176626},"http":{"id":"f1015e6e-a419-4c13-a9cd-27b5ec745b5c","method":"POST","headers":{":authority":"e2e-shared-a-c32d0d.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T16:32:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f1015e6e-a419-4c13-a9cd-27b5ec745b5c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T16:32:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f1015e6e-a419-4c13-a9cd-27b5ec745b5c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7a40ffd7-a182-4c3c-800e-1500d8c71f55","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=140fc507-4b2c-41b0-acee-fa2979abe5ce"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9a27fba088"]}}
{"level":"debug","ts":"2026-07-10T16:32:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f1015e6e-a419-4c13-a9cd-27b5ec745b5c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9a27fba088"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=140fc507-4b2c-41b0-acee-fa2979abe5ce"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7a40ffd7-a182-4c3c-800e-1500d8c71f55","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e49051792b57df5810fde9b861812a25231a47623393de5f45505cc93d8fbc54"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c32d0d.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T16:32:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f1015e6e-a419-4c13-a9cd-27b5ec745b5c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:32:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f1015e6e-a419-4c13-a9cd-27b5ec745b5c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:32:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f1015e6e-a419-4c13-a9cd-27b5ec745b5c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c32d0d/auth-test-model-c32d0d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:32:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f1015e6e-a419-4c13-a9cd-27b5ec745b5c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T16:32:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f1015e6e-a419-4c13-a9cd-27b5ec745b5c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T16:32:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f1015e6e-a419-4c13-a9cd-27b5ec745b5c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T16:32:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f1015e6e-a419-4c13-a9cd-27b5ec745b5c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T16:32:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f1015e6e-a419-4c13-a9cd-27b5ec745b5c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T16:32:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d2a1e08c-2300-4005-a2f3-481d3760cc58","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:55834","PortSpecifier":{"PortValue":55834}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d2a1e08c-2300-4005-a2f3-481d3760cc58","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-466b1a.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T16:32:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d2a1e08c-2300-4005-a2f3-481d3760cc58","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:55834","PortSpecifier":{"PortValue":55834}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783701131,"nanos":307078720},"http":{"id":"d2a1e08c-2300-4005-a2f3-481d3760cc58","method":"POST","headers":{":authority":"e2e-shared-b-466b1a.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T16:32:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d2a1e08c-2300-4005-a2f3-481d3760cc58","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T16:32:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d2a1e08c-2300-4005-a2f3-481d3760cc58","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7a40ffd7-a182-4c3c-800e-1500d8c71f55","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=140fc507-4b2c-41b0-acee-fa2979abe5ce"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9a27fba088"]}}
{"level":"debug","ts":"2026-07-10T16:32:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d2a1e08c-2300-4005-a2f3-481d3760cc58","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9a27fba088"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=140fc507-4b2c-41b0-acee-fa2979abe5ce"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7a40ffd7-a182-4c3c-800e-1500d8c71f55","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e838baba826e016bf3e907ef3289699aedfd7707968047696d2bc8d7dffeb8b7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-466b1a.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T16:32:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d2a1e08c-2300-4005-a2f3-481d3760cc58","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:32:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d2a1e08c-2300-4005-a2f3-481d3760cc58","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:32:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d2a1e08c-2300-4005-a2f3-481d3760cc58","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-466b1a/auth-test-model-466b1a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:32:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d2a1e08c-2300-4005-a2f3-481d3760cc58","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T16:32:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d2a1e08c-2300-4005-a2f3-481d3760cc58","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T16:32:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d2a1e08c-2300-4005-a2f3-481d3760cc58","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T16:32:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d2a1e08c-2300-4005-a2f3-481d3760cc58","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T16:32:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d2a1e08c-2300-4005-a2f3-481d3760cc58","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T16:32:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aaa7095b-8dfc-4ac5-be73-8b624749de39","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:36988","PortSpecifier":{"PortValue":36988}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"aaa7095b-8dfc-4ac5-be73-8b624749de39","method":"GET","path":"/maas-api/v1/api-keys/ac0a0e96-30a8-4292-b515-e46cc2500474","host":"e2e-shared-a-c32d0d.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T16:32:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aaa7095b-8dfc-4ac5-be73-8b624749de39","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:36988","PortSpecifier":{"PortValue":36988}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783701131,"nanos":369052743},"http":{"id":"aaa7095b-8dfc-4ac5-be73-8b624749de39","method":"GET","headers":{":authority":"e2e-shared-a-c32d0d.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/ac0a0e96-30a8-4292-b515-e46cc2500474",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T16:32:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"aaa7095b-8dfc-4ac5-be73-8b624749de39","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T16:32:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"aaa7095b-8dfc-4ac5-be73-8b624749de39","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7a40ffd7-a182-4c3c-800e-1500d8c71f55","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=140fc507-4b2c-41b0-acee-fa2979abe5ce"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9a27fba088"]}}
{"level":"debug","ts":"2026-07-10T16:32:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"aaa7095b-8dfc-4ac5-be73-8b624749de39","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9a27fba088"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=140fc507-4b2c-41b0-acee-fa2979abe5ce"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7a40ffd7-a182-4c3c-800e-1500d8c71f55","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e49051792b57df5810fde9b861812a25231a47623393de5f45505cc93d8fbc54"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c32d0d.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/ac0a0e96-30a8-4292-b515-e46cc2500474",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T16:32:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aaa7095b-8dfc-4ac5-be73-8b624749de39","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:32:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aaa7095b-8dfc-4ac5-be73-8b624749de39","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:32:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aaa7095b-8dfc-4ac5-be73-8b624749de39","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c32d0d/auth-test-model-c32d0d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:32:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"aaa7095b-8dfc-4ac5-be73-8b624749de39","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T16:32:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aaa7095b-8dfc-4ac5-be73-8b624749de39","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T16:32:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aaa7095b-8dfc-4ac5-be73-8b624749de39","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T16:32:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aaa7095b-8dfc-4ac5-be73-8b624749de39","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T16:32:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aaa7095b-8dfc-4ac5-be73-8b624749de39","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T16:32:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bf7262ae-7890-4339-8251-4c0ab6f2056f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:55840","PortSpecifier":{"PortValue":55840}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bf7262ae-7890-4339-8251-4c0ab6f2056f","method":"GET","path":"/maas-api/v1/api-keys/099a6804-31ce-4c11-a50b-37b56331e528","host":"e2e-shared-b-466b1a.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T16:32:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bf7262ae-7890-4339-8251-4c0ab6f2056f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:55840","PortSpecifier":{"PortValue":55840}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783701131,"nanos":417913058},"http":{"id":"bf7262ae-7890-4339-8251-4c0ab6f2056f","method":"GET","headers":{":authority":"e2e-shared-b-466b1a.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/099a6804-31ce-4c11-a50b-37b56331e528",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T16:32:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bf7262ae-7890-4339-8251-4c0ab6f2056f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T16:32:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bf7262ae-7890-4339-8251-4c0ab6f2056f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7a40ffd7-a182-4c3c-800e-1500d8c71f55","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=140fc507-4b2c-41b0-acee-fa2979abe5ce"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9a27fba088"]}}
{"level":"debug","ts":"2026-07-10T16:32:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bf7262ae-7890-4339-8251-4c0ab6f2056f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9a27fba088"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=140fc507-4b2c-41b0-acee-fa2979abe5ce"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7a40ffd7-a182-4c3c-800e-1500d8c71f55","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e838baba826e016bf3e907ef3289699aedfd7707968047696d2bc8d7dffeb8b7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-466b1a.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/099a6804-31ce-4c11-a50b-37b56331e528",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T16:32:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bf7262ae-7890-4339-8251-4c0ab6f2056f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:32:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bf7262ae-7890-4339-8251-4c0ab6f2056f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:32:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bf7262ae-7890-4339-8251-4c0ab6f2056f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-466b1a/auth-test-model-466b1a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:32:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bf7262ae-7890-4339-8251-4c0ab6f2056f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T16:32:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bf7262ae-7890-4339-8251-4c0ab6f2056f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T16:32:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bf7262ae-7890-4339-8251-4c0ab6f2056f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T16:32:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bf7262ae-7890-4339-8251-4c0ab6f2056f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T16:32:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bf7262ae-7890-4339-8251-4c0ab6f2056f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T16:32:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6d2a2b72-b005-498a-adb7-53e81d01b953","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:49756","PortSpecifier":{"PortValue":49756}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6d2a2b72-b005-498a-adb7-53e81d01b953","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-c32d0d.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T16:32:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6d2a2b72-b005-498a-adb7-53e81d01b953","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:49756","PortSpecifier":{"PortValue":49756}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783701148,"nanos":606678197},"http":{"id":"6d2a2b72-b005-498a-adb7-53e81d01b953","method":"POST","headers":{":authority":"e2e-shared-a-c32d0d.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T16:32:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6d2a2b72-b005-498a-adb7-53e81d01b953","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T16:32:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6d2a2b72-b005-498a-adb7-53e81d01b953","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7a40ffd7-a182-4c3c-800e-1500d8c71f55","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=140fc507-4b2c-41b0-acee-fa2979abe5ce"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9a27fba088"]}}
{"level":"debug","ts":"2026-07-10T16:32:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6d2a2b72-b005-498a-adb7-53e81d01b953","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9a27fba088"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=140fc507-4b2c-41b0-acee-fa2979abe5ce"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7a40ffd7-a182-4c3c-800e-1500d8c71f55","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e49051792b57df5810fde9b861812a25231a47623393de5f45505cc93d8fbc54"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c32d0d.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T16:32:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6d2a2b72-b005-498a-adb7-53e81d01b953","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:32:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6d2a2b72-b005-498a-adb7-53e81d01b953","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:32:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6d2a2b72-b005-498a-adb7-53e81d01b953","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c32d0d/auth-test-model-c32d0d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:32:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6d2a2b72-b005-498a-adb7-53e81d01b953","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T16:32:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6d2a2b72-b005-498a-adb7-53e81d01b953","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T16:32:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6d2a2b72-b005-498a-adb7-53e81d01b953","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T16:32:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6d2a2b72-b005-498a-adb7-53e81d01b953","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T16:32:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6d2a2b72-b005-498a-adb7-53e81d01b953","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T16:32:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2004afa7-224e-4381-978e-ef13ba4c2374","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:42412","PortSpecifier":{"PortValue":42412}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2004afa7-224e-4381-978e-ef13ba4c2374","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-466b1a.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T16:32:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2004afa7-224e-4381-978e-ef13ba4c2374","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:42412","PortSpecifier":{"PortValue":42412}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783701148,"nanos":663951084},"http":{"id":"2004afa7-224e-4381-978e-ef13ba4c2374","method":"POST","headers":{":authority":"e2e-shared-b-466b1a.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T16:32:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2004afa7-224e-4381-978e-ef13ba4c2374","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T16:32:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2004afa7-224e-4381-978e-ef13ba4c2374","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7a40ffd7-a182-4c3c-800e-1500d8c71f55","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=140fc507-4b2c-41b0-acee-fa2979abe5ce"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9a27fba088"]}}
{"level":"debug","ts":"2026-07-10T16:32:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2004afa7-224e-4381-978e-ef13ba4c2374","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9a27fba088"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=140fc507-4b2c-41b0-acee-fa2979abe5ce"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7a40ffd7-a182-4c3c-800e-1500d8c71f55","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e838baba826e016bf3e907ef3289699aedfd7707968047696d2bc8d7dffeb8b7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-466b1a.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T16:32:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2004afa7-224e-4381-978e-ef13ba4c2374","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:32:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2004afa7-224e-4381-978e-ef13ba4c2374","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:32:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2004afa7-224e-4381-978e-ef13ba4c2374","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-466b1a/auth-test-model-466b1a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:32:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2004afa7-224e-4381-978e-ef13ba4c2374","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T16:32:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2004afa7-224e-4381-978e-ef13ba4c2374","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T16:32:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2004afa7-224e-4381-978e-ef13ba4c2374","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T16:32:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2004afa7-224e-4381-978e-ef13ba4c2374","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T16:32:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2004afa7-224e-4381-978e-ef13ba4c2374","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T16:32:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1a57dea9-69ec-4bca-87c1-7a173d9ea0c5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:49766","PortSpecifier":{"PortValue":49766}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1a57dea9-69ec-4bca-87c1-7a173d9ea0c5","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-c32d0d.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T16:32:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1a57dea9-69ec-4bca-87c1-7a173d9ea0c5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:49766","PortSpecifier":{"PortValue":49766}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783701148,"nanos":709683376},"http":{"id":"1a57dea9-69ec-4bca-87c1-7a173d9ea0c5","method":"GET","headers":{":authority":"e2e-shared-a-c32d0d.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T16:32:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1a57dea9-69ec-4bca-87c1-7a173d9ea0c5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-6bmfrNHDd3Z91KOK_ixrYarjiuRb7enmDOO0oUOmlPhEqC8xLj7C2ucgkjuu"}
{"level":"debug","ts":"2026-07-10T16:32:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1a57dea9-69ec-4bca-87c1-7a173d9ea0c5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c32d0d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-6bmfrNHDd3Z91KOK_ixrYarjiuRb7enmDOO0oUOmlPhEqC8xLj7C2ucgkjuu\"}"}
{"level":"debug","ts":"2026-07-10T16:32:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1a57dea9-69ec-4bca-87c1-7a173d9ea0c5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c32d0d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8d1273d0-023a-4261-9caf-a4caad688afe","keyName":"e2e-auth-iso-a-278bce","subscription":"e2e-auth-iso-ecc6a8","tenant":"e2e-shared-a-c32d0d","userId":"8d1273d0-023a-4261-9caf-a4caad688afe","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T16:32:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1a57dea9-69ec-4bca-87c1-7a173d9ea0c5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T16:32:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a57dea9-69ec-4bca-87c1-7a173d9ea0c5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:32:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a57dea9-69ec-4bca-87c1-7a173d9ea0c5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:32:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a57dea9-69ec-4bca-87c1-7a173d9ea0c5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c32d0d/auth-test-model-c32d0d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:32:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a57dea9-69ec-4bca-87c1-7a173d9ea0c5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T16:32:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a57dea9-69ec-4bca-87c1-7a173d9ea0c5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T16:32:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a57dea9-69ec-4bca-87c1-7a173d9ea0c5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-ecc6a8"}
{"level":"debug","ts":"2026-07-10T16:32:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1a57dea9-69ec-4bca-87c1-7a173d9ea0c5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-10T16:32:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1a57dea9-69ec-4bca-87c1-7a173d9ea0c5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T16:32:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1a57dea9-69ec-4bca-87c1-7a173d9ea0c5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T16:32:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1d25bb6b-c68a-4422-8a60-84ed4b7a2c7a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:50636","PortSpecifier":{"PortValue":50636}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1d25bb6b-c68a-4422-8a60-84ed4b7a2c7a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-c32d0d.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T16:32:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1d25bb6b-c68a-4422-8a60-84ed4b7a2c7a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:50636","PortSpecifier":{"PortValue":50636}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783701165,"nanos":881121830},"http":{"id":"1d25bb6b-c68a-4422-8a60-84ed4b7a2c7a","method":"POST","headers":{":authority":"e2e-shared-a-c32d0d.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T16:32:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1d25bb6b-c68a-4422-8a60-84ed4b7a2c7a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T16:32:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1d25bb6b-c68a-4422-8a60-84ed4b7a2c7a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7a40ffd7-a182-4c3c-800e-1500d8c71f55","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=140fc507-4b2c-41b0-acee-fa2979abe5ce"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9a27fba088"]}}
{"level":"debug","ts":"2026-07-10T16:32:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1d25bb6b-c68a-4422-8a60-84ed4b7a2c7a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9a27fba088"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=140fc507-4b2c-41b0-acee-fa2979abe5ce"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7a40ffd7-a182-4c3c-800e-1500d8c71f55","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e49051792b57df5810fde9b861812a25231a47623393de5f45505cc93d8fbc54"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c32d0d.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T16:32:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1d25bb6b-c68a-4422-8a60-84ed4b7a2c7a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:32:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1d25bb6b-c68a-4422-8a60-84ed4b7a2c7a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:32:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1d25bb6b-c68a-4422-8a60-84ed4b7a2c7a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c32d0d/auth-test-model-c32d0d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:32:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1d25bb6b-c68a-4422-8a60-84ed4b7a2c7a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T16:32:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1d25bb6b-c68a-4422-8a60-84ed4b7a2c7a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T16:32:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1d25bb6b-c68a-4422-8a60-84ed4b7a2c7a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-10T16:32:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1d25bb6b-c68a-4422-8a60-84ed4b7a2c7a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T16:32:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1d25bb6b-c68a-4422-8a60-84ed4b7a2c7a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T16:32:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"52fa76ad-0e44-4068-8725-ab6f10d12bdb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:48732","PortSpecifier":{"PortValue":48732}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"52fa76ad-0e44-4068-8725-ab6f10d12bdb","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-466b1a.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T16:32:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"52fa76ad-0e44-4068-8725-ab6f10d12bdb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:48732","PortSpecifier":{"PortValue":48732}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783701165,"nanos":915934478},"http":{"id":"52fa76ad-0e44-4068-8725-ab6f10d12bdb","method":"POST","headers":{":authority":"e2e-shared-b-466b1a.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T16:32:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"52fa76ad-0e44-4068-8725-ab6f10d12bdb","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T16:32:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"52fa76ad-0e44-4068-8725-ab6f10d12bdb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7a40ffd7-a182-4c3c-800e-1500d8c71f55","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=140fc507-4b2c-41b0-acee-fa2979abe5ce"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9a27fba088"]}}
{"level":"debug","ts":"2026-07-10T16:32:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"52fa76ad-0e44-4068-8725-ab6f10d12bdb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9a27fba088"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=140fc507-4b2c-41b0-acee-fa2979abe5ce"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7a40ffd7-a182-4c3c-800e-1500d8c71f55","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e838baba826e016bf3e907ef3289699aedfd7707968047696d2bc8d7dffeb8b7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-466b1a.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T16:32:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52fa76ad-0e44-4068-8725-ab6f10d12bdb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:32:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52fa76ad-0e44-4068-8725-ab6f10d12bdb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:32:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52fa76ad-0e44-4068-8725-ab6f10d12bdb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-466b1a/auth-test-model-466b1a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:32:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"52fa76ad-0e44-4068-8725-ab6f10d12bdb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T16:32:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"52fa76ad-0e44-4068-8725-ab6f10d12bdb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T16:32:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"52fa76ad-0e44-4068-8725-ab6f10d12bdb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-10T16:32:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"52fa76ad-0e44-4068-8725-ab6f10d12bdb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T16:32:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"52fa76ad-0e44-4068-8725-ab6f10d12bdb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T16:32:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2ac582b1-659e-40c5-8a58-028ea9d55198","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:48738","PortSpecifier":{"PortValue":48738}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2ac582b1-659e-40c5-8a58-028ea9d55198","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-466b1a.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T16:32:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2ac582b1-659e-40c5-8a58-028ea9d55198","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:48738","PortSpecifier":{"PortValue":48738}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783701165,"nanos":951436140},"http":{"id":"2ac582b1-659e-40c5-8a58-028ea9d55198","method":"GET","headers":{":authority":"e2e-shared-b-466b1a.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T16:32:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2ac582b1-659e-40c5-8a58-028ea9d55198","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1CGzpryFvCirSfrZt_J5arlcUW9cbuHv8DAJwZ7o4uqx8TE9thpZ2oQBwXxqN"}
{"level":"debug","ts":"2026-07-10T16:32:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2ac582b1-659e-40c5-8a58-028ea9d55198","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-466b1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1CGzpryFvCirSfrZt_J5arlcUW9cbuHv8DAJwZ7o4uqx8TE9thpZ2oQBwXxqN\"}"}
{"level":"debug","ts":"2026-07-10T16:32:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2ac582b1-659e-40c5-8a58-028ea9d55198","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-466b1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-10T16:32:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2ac582b1-659e-40c5-8a58-028ea9d55198","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"e838baba826e016bf3e907ef3289699aedfd7707968047696d2bc8d7dffeb8b7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-466b1a.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T16:32:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ac582b1-659e-40c5-8a58-028ea9d55198","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:32:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"2ac582b1-659e-40c5-8a58-028ea9d55198","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-10T16:32:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2ac582b1-659e-40c5-8a58-028ea9d55198","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-10T16:32:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2ac582b1-659e-40c5-8a58-028ea9d55198","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-10T16:33:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"22817c74-9069-4de5-9000-100ce2d894b6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:52570","PortSpecifier":{"PortValue":52570}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"22817c74-9069-4de5-9000-100ce2d894b6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-c32d0d.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T16:33:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"22817c74-9069-4de5-9000-100ce2d894b6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:52570","PortSpecifier":{"PortValue":52570}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783701183,"nanos":132804632},"http":{"id":"22817c74-9069-4de5-9000-100ce2d894b6","method":"POST","headers":{":authority":"e2e-shared-a-c32d0d.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T16:33:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"22817c74-9069-4de5-9000-100ce2d894b6","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T16:33:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"22817c74-9069-4de5-9000-100ce2d894b6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7a40ffd7-a182-4c3c-800e-1500d8c71f55","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=140fc507-4b2c-41b0-acee-fa2979abe5ce"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9a27fba088"]}}
{"level":"debug","ts":"2026-07-10T16:33:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"22817c74-9069-4de5-9000-100ce2d894b6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9a27fba088"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=140fc507-4b2c-41b0-acee-fa2979abe5ce"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7a40ffd7-a182-4c3c-800e-1500d8c71f55","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e49051792b57df5810fde9b861812a25231a47623393de5f45505cc93d8fbc54"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c32d0d.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T16:33:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"22817c74-9069-4de5-9000-100ce2d894b6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:33:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"22817c74-9069-4de5-9000-100ce2d894b6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:33:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"22817c74-9069-4de5-9000-100ce2d894b6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c32d0d/auth-test-model-c32d0d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:33:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"22817c74-9069-4de5-9000-100ce2d894b6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T16:33:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"22817c74-9069-4de5-9000-100ce2d894b6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T16:33:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"22817c74-9069-4de5-9000-100ce2d894b6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T16:33:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"22817c74-9069-4de5-9000-100ce2d894b6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T16:33:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"22817c74-9069-4de5-9000-100ce2d894b6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T16:33:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f9214612-8128-47cd-8f46-2ab38d0d6e86","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:36120","PortSpecifier":{"PortValue":36120}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f9214612-8128-47cd-8f46-2ab38d0d6e86","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-466b1a.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T16:33:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f9214612-8128-47cd-8f46-2ab38d0d6e86","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:36120","PortSpecifier":{"PortValue":36120}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783701183,"nanos":181195901},"http":{"id":"f9214612-8128-47cd-8f46-2ab38d0d6e86","method":"POST","headers":{":authority":"e2e-shared-b-466b1a.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T16:33:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f9214612-8128-47cd-8f46-2ab38d0d6e86","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T16:33:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f9214612-8128-47cd-8f46-2ab38d0d6e86","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7a40ffd7-a182-4c3c-800e-1500d8c71f55","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=140fc507-4b2c-41b0-acee-fa2979abe5ce"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9a27fba088"]}}
{"level":"debug","ts":"2026-07-10T16:33:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f9214612-8128-47cd-8f46-2ab38d0d6e86","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9a27fba088"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=140fc507-4b2c-41b0-acee-fa2979abe5ce"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7a40ffd7-a182-4c3c-800e-1500d8c71f55","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e838baba826e016bf3e907ef3289699aedfd7707968047696d2bc8d7dffeb8b7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-466b1a.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T16:33:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f9214612-8128-47cd-8f46-2ab38d0d6e86","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:33:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f9214612-8128-47cd-8f46-2ab38d0d6e86","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:33:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f9214612-8128-47cd-8f46-2ab38d0d6e86","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-466b1a/auth-test-model-466b1a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:33:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f9214612-8128-47cd-8f46-2ab38d0d6e86","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T16:33:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f9214612-8128-47cd-8f46-2ab38d0d6e86","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T16:33:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f9214612-8128-47cd-8f46-2ab38d0d6e86","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T16:33:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f9214612-8128-47cd-8f46-2ab38d0d6e86","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T16:33:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f9214612-8128-47cd-8f46-2ab38d0d6e86","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T16:33:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3723c20f-a99b-468c-922b-401629ff8251","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:52576","PortSpecifier":{"PortValue":52576}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3723c20f-a99b-468c-922b-401629ff8251","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-c32d0d.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T16:33:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3723c20f-a99b-468c-922b-401629ff8251","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:52576","PortSpecifier":{"PortValue":52576}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783701183,"nanos":229148520},"http":{"id":"3723c20f-a99b-468c-922b-401629ff8251","method":"POST","headers":{":authority":"e2e-shared-a-c32d0d.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T16:33:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3723c20f-a99b-468c-922b-401629ff8251","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T16:33:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3723c20f-a99b-468c-922b-401629ff8251","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7a40ffd7-a182-4c3c-800e-1500d8c71f55","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=140fc507-4b2c-41b0-acee-fa2979abe5ce"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9a27fba088"]}}
{"level":"debug","ts":"2026-07-10T16:33:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3723c20f-a99b-468c-922b-401629ff8251","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9a27fba088"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=140fc507-4b2c-41b0-acee-fa2979abe5ce"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7a40ffd7-a182-4c3c-800e-1500d8c71f55","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e49051792b57df5810fde9b861812a25231a47623393de5f45505cc93d8fbc54"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c32d0d.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T16:33:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3723c20f-a99b-468c-922b-401629ff8251","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:33:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3723c20f-a99b-468c-922b-401629ff8251","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:33:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3723c20f-a99b-468c-922b-401629ff8251","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c32d0d/auth-test-model-c32d0d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:33:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3723c20f-a99b-468c-922b-401629ff8251","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T16:33:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3723c20f-a99b-468c-922b-401629ff8251","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T16:33:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3723c20f-a99b-468c-922b-401629ff8251","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T16:33:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3723c20f-a99b-468c-922b-401629ff8251","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T16:33:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3723c20f-a99b-468c-922b-401629ff8251","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T16:33:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1e6df4b3-5bb2-49e6-af88-0ca6cd76aafe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:36124","PortSpecifier":{"PortValue":36124}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1e6df4b3-5bb2-49e6-af88-0ca6cd76aafe","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-466b1a.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T16:33:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1e6df4b3-5bb2-49e6-af88-0ca6cd76aafe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:36124","PortSpecifier":{"PortValue":36124}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783701183,"nanos":267313756},"http":{"id":"1e6df4b3-5bb2-49e6-af88-0ca6cd76aafe","method":"POST","headers":{":authority":"e2e-shared-b-466b1a.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T16:33:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1e6df4b3-5bb2-49e6-af88-0ca6cd76aafe","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T16:33:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1e6df4b3-5bb2-49e6-af88-0ca6cd76aafe","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7a40ffd7-a182-4c3c-800e-1500d8c71f55","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=140fc507-4b2c-41b0-acee-fa2979abe5ce"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9a27fba088"]}}
{"level":"debug","ts":"2026-07-10T16:33:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1e6df4b3-5bb2-49e6-af88-0ca6cd76aafe","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9a27fba088"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=140fc507-4b2c-41b0-acee-fa2979abe5ce"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7a40ffd7-a182-4c3c-800e-1500d8c71f55","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e838baba826e016bf3e907ef3289699aedfd7707968047696d2bc8d7dffeb8b7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-466b1a.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T16:33:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1e6df4b3-5bb2-49e6-af88-0ca6cd76aafe","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:33:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1e6df4b3-5bb2-49e6-af88-0ca6cd76aafe","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:33:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1e6df4b3-5bb2-49e6-af88-0ca6cd76aafe","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-466b1a/auth-test-model-466b1a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:33:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1e6df4b3-5bb2-49e6-af88-0ca6cd76aafe","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T16:33:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1e6df4b3-5bb2-49e6-af88-0ca6cd76aafe","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T16:33:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1e6df4b3-5bb2-49e6-af88-0ca6cd76aafe","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T16:33:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1e6df4b3-5bb2-49e6-af88-0ca6cd76aafe","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T16:33:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1e6df4b3-5bb2-49e6-af88-0ca6cd76aafe","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T16:33:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9caf8cf3-7cc6-422e-9260-ae05720b8474","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:33376","PortSpecifier":{"PortValue":33376}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9caf8cf3-7cc6-422e-9260-ae05720b8474","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-c32d0d.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T16:33:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9caf8cf3-7cc6-422e-9260-ae05720b8474","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:33376","PortSpecifier":{"PortValue":33376}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783701202,"nanos":525477030},"http":{"id":"9caf8cf3-7cc6-422e-9260-ae05720b8474","method":"POST","headers":{":authority":"e2e-shared-a-c32d0d.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T16:33:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9caf8cf3-7cc6-422e-9260-ae05720b8474","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T16:33:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9caf8cf3-7cc6-422e-9260-ae05720b8474","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7a40ffd7-a182-4c3c-800e-1500d8c71f55","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=140fc507-4b2c-41b0-acee-fa2979abe5ce"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9a27fba088"]}}
{"level":"debug","ts":"2026-07-10T16:33:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9caf8cf3-7cc6-422e-9260-ae05720b8474","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9a27fba088"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=140fc507-4b2c-41b0-acee-fa2979abe5ce"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7a40ffd7-a182-4c3c-800e-1500d8c71f55","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e49051792b57df5810fde9b861812a25231a47623393de5f45505cc93d8fbc54"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c32d0d.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T16:33:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9caf8cf3-7cc6-422e-9260-ae05720b8474","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:33:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9caf8cf3-7cc6-422e-9260-ae05720b8474","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:33:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9caf8cf3-7cc6-422e-9260-ae05720b8474","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c32d0d/auth-test-model-c32d0d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:33:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9caf8cf3-7cc6-422e-9260-ae05720b8474","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T16:33:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9caf8cf3-7cc6-422e-9260-ae05720b8474","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T16:33:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9caf8cf3-7cc6-422e-9260-ae05720b8474","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T16:33:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9caf8cf3-7cc6-422e-9260-ae05720b8474","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T16:33:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9caf8cf3-7cc6-422e-9260-ae05720b8474","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T16:33:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0e34c596-7b6e-46fb-8872-c8bfeeebb460","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:37534","PortSpecifier":{"PortValue":37534}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0e34c596-7b6e-46fb-8872-c8bfeeebb460","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-466b1a.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T16:33:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0e34c596-7b6e-46fb-8872-c8bfeeebb460","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:37534","PortSpecifier":{"PortValue":37534}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783701202,"nanos":560806146},"http":{"id":"0e34c596-7b6e-46fb-8872-c8bfeeebb460","method":"POST","headers":{":authority":"e2e-shared-b-466b1a.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T16:33:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0e34c596-7b6e-46fb-8872-c8bfeeebb460","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T16:33:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0e34c596-7b6e-46fb-8872-c8bfeeebb460","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7a40ffd7-a182-4c3c-800e-1500d8c71f55","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=140fc507-4b2c-41b0-acee-fa2979abe5ce"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9a27fba088"]}}
{"level":"debug","ts":"2026-07-10T16:33:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0e34c596-7b6e-46fb-8872-c8bfeeebb460","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9a27fba088"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=140fc507-4b2c-41b0-acee-fa2979abe5ce"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7a40ffd7-a182-4c3c-800e-1500d8c71f55","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e838baba826e016bf3e907ef3289699aedfd7707968047696d2bc8d7dffeb8b7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-466b1a.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T16:33:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e34c596-7b6e-46fb-8872-c8bfeeebb460","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:33:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e34c596-7b6e-46fb-8872-c8bfeeebb460","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:33:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e34c596-7b6e-46fb-8872-c8bfeeebb460","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-466b1a/auth-test-model-466b1a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:33:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0e34c596-7b6e-46fb-8872-c8bfeeebb460","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T16:33:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0e34c596-7b6e-46fb-8872-c8bfeeebb460","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T16:33:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0e34c596-7b6e-46fb-8872-c8bfeeebb460","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-10T16:33:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0e34c596-7b6e-46fb-8872-c8bfeeebb460","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T16:33:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0e34c596-7b6e-46fb-8872-c8bfeeebb460","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T16:33:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dd1aa7ca-6bb3-4354-9db4-73ae20d84268","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:37548","PortSpecifier":{"PortValue":37548}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dd1aa7ca-6bb3-4354-9db4-73ae20d84268","method":"GET","path":"/maas-api/v1/api-keys/9b0b7e40-f351-4643-9a09-bff357f286e2","host":"e2e-shared-b-466b1a.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T16:33:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dd1aa7ca-6bb3-4354-9db4-73ae20d84268","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:37548","PortSpecifier":{"PortValue":37548}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783701202,"nanos":603661855},"http":{"id":"dd1aa7ca-6bb3-4354-9db4-73ae20d84268","method":"GET","headers":{":authority":"e2e-shared-b-466b1a.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/9b0b7e40-f351-4643-9a09-bff357f286e2",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T16:33:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"dd1aa7ca-6bb3-4354-9db4-73ae20d84268","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T16:33:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dd1aa7ca-6bb3-4354-9db4-73ae20d84268","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7a40ffd7-a182-4c3c-800e-1500d8c71f55","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=140fc507-4b2c-41b0-acee-fa2979abe5ce"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9a27fba088"]}}
{"level":"debug","ts":"2026-07-10T16:33:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dd1aa7ca-6bb3-4354-9db4-73ae20d84268","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9a27fba088"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=140fc507-4b2c-41b0-acee-fa2979abe5ce"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7a40ffd7-a182-4c3c-800e-1500d8c71f55","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e838baba826e016bf3e907ef3289699aedfd7707968047696d2bc8d7dffeb8b7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-466b1a.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/9b0b7e40-f351-4643-9a09-bff357f286e2",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T16:33:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dd1aa7ca-6bb3-4354-9db4-73ae20d84268","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:33:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dd1aa7ca-6bb3-4354-9db4-73ae20d84268","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:33:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dd1aa7ca-6bb3-4354-9db4-73ae20d84268","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-466b1a/auth-test-model-466b1a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:33:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"dd1aa7ca-6bb3-4354-9db4-73ae20d84268","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T16:33:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dd1aa7ca-6bb3-4354-9db4-73ae20d84268","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T16:33:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dd1aa7ca-6bb3-4354-9db4-73ae20d84268","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-10T16:33:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dd1aa7ca-6bb3-4354-9db4-73ae20d84268","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T16:33:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dd1aa7ca-6bb3-4354-9db4-73ae20d84268","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T16:33:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5261ec2d-7a2e-4557-88de-fe1bc55e74c5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:33378","PortSpecifier":{"PortValue":33378}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5261ec2d-7a2e-4557-88de-fe1bc55e74c5","method":"GET","path":"/maas-api/v1/api-keys/9b0b7e40-f351-4643-9a09-bff357f286e2","host":"e2e-shared-a-c32d0d.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T16:33:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5261ec2d-7a2e-4557-88de-fe1bc55e74c5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:33378","PortSpecifier":{"PortValue":33378}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783701202,"nanos":654065204},"http":{"id":"5261ec2d-7a2e-4557-88de-fe1bc55e74c5","method":"GET","headers":{":authority":"e2e-shared-a-c32d0d.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/9b0b7e40-f351-4643-9a09-bff357f286e2",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T16:33:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5261ec2d-7a2e-4557-88de-fe1bc55e74c5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T16:33:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5261ec2d-7a2e-4557-88de-fe1bc55e74c5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7a40ffd7-a182-4c3c-800e-1500d8c71f55","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=140fc507-4b2c-41b0-acee-fa2979abe5ce"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9a27fba088"]}}
{"level":"debug","ts":"2026-07-10T16:33:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5261ec2d-7a2e-4557-88de-fe1bc55e74c5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9a27fba088"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=140fc507-4b2c-41b0-acee-fa2979abe5ce"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7a40ffd7-a182-4c3c-800e-1500d8c71f55","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e49051792b57df5810fde9b861812a25231a47623393de5f45505cc93d8fbc54"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c32d0d.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/9b0b7e40-f351-4643-9a09-bff357f286e2",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T16:33:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5261ec2d-7a2e-4557-88de-fe1bc55e74c5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:33:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5261ec2d-7a2e-4557-88de-fe1bc55e74c5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:33:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5261ec2d-7a2e-4557-88de-fe1bc55e74c5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c32d0d/auth-test-model-c32d0d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:33:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5261ec2d-7a2e-4557-88de-fe1bc55e74c5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T16:33:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5261ec2d-7a2e-4557-88de-fe1bc55e74c5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T16:33:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5261ec2d-7a2e-4557-88de-fe1bc55e74c5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T16:33:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5261ec2d-7a2e-4557-88de-fe1bc55e74c5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T16:33:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5261ec2d-7a2e-4557-88de-fe1bc55e74c5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T16:33:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f7336296-a44e-4064-a2b4-453f717bef80","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:54676","PortSpecifier":{"PortValue":54676}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f7336296-a44e-4064-a2b4-453f717bef80","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-c32d0d.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T16:33:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f7336296-a44e-4064-a2b4-453f717bef80","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:54676","PortSpecifier":{"PortValue":54676}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783701222,"nanos":19381759},"http":{"id":"f7336296-a44e-4064-a2b4-453f717bef80","method":"POST","headers":{":authority":"e2e-shared-a-c32d0d.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T16:33:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f7336296-a44e-4064-a2b4-453f717bef80","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T16:33:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f7336296-a44e-4064-a2b4-453f717bef80","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7a40ffd7-a182-4c3c-800e-1500d8c71f55","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=140fc507-4b2c-41b0-acee-fa2979abe5ce"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9a27fba088"]}}
{"level":"debug","ts":"2026-07-10T16:33:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f7336296-a44e-4064-a2b4-453f717bef80","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9a27fba088"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=140fc507-4b2c-41b0-acee-fa2979abe5ce"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7a40ffd7-a182-4c3c-800e-1500d8c71f55","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e49051792b57df5810fde9b861812a25231a47623393de5f45505cc93d8fbc54"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c32d0d.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T16:33:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7336296-a44e-4064-a2b4-453f717bef80","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:33:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7336296-a44e-4064-a2b4-453f717bef80","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:33:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7336296-a44e-4064-a2b4-453f717bef80","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c32d0d/auth-test-model-c32d0d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:33:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f7336296-a44e-4064-a2b4-453f717bef80","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T16:33:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f7336296-a44e-4064-a2b4-453f717bef80","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T16:33:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f7336296-a44e-4064-a2b4-453f717bef80","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T16:33:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f7336296-a44e-4064-a2b4-453f717bef80","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T16:33:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f7336296-a44e-4064-a2b4-453f717bef80","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T16:33:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"61ff11c3-b008-41de-be67-80b15edc1aa8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:42224","PortSpecifier":{"PortValue":42224}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"61ff11c3-b008-41de-be67-80b15edc1aa8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-466b1a.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T16:33:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"61ff11c3-b008-41de-be67-80b15edc1aa8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:42224","PortSpecifier":{"PortValue":42224}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783701222,"nanos":64511483},"http":{"id":"61ff11c3-b008-41de-be67-80b15edc1aa8","method":"POST","headers":{":authority":"e2e-shared-b-466b1a.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T16:33:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"61ff11c3-b008-41de-be67-80b15edc1aa8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T16:33:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"61ff11c3-b008-41de-be67-80b15edc1aa8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7a40ffd7-a182-4c3c-800e-1500d8c71f55","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=140fc507-4b2c-41b0-acee-fa2979abe5ce"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9a27fba088"]}}
{"level":"debug","ts":"2026-07-10T16:33:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"61ff11c3-b008-41de-be67-80b15edc1aa8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9a27fba088"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=140fc507-4b2c-41b0-acee-fa2979abe5ce"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7a40ffd7-a182-4c3c-800e-1500d8c71f55","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e838baba826e016bf3e907ef3289699aedfd7707968047696d2bc8d7dffeb8b7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-466b1a.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T16:33:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"61ff11c3-b008-41de-be67-80b15edc1aa8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:33:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"61ff11c3-b008-41de-be67-80b15edc1aa8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:33:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"61ff11c3-b008-41de-be67-80b15edc1aa8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-466b1a/auth-test-model-466b1a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:33:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"61ff11c3-b008-41de-be67-80b15edc1aa8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T16:33:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"61ff11c3-b008-41de-be67-80b15edc1aa8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T16:33:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"61ff11c3-b008-41de-be67-80b15edc1aa8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T16:33:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"61ff11c3-b008-41de-be67-80b15edc1aa8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T16:33:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"61ff11c3-b008-41de-be67-80b15edc1aa8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T16:33:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0659fd0a-0012-424c-8afa-3eda00a214d6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:54684","PortSpecifier":{"PortValue":54684}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0659fd0a-0012-424c-8afa-3eda00a214d6","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-c32d0d.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T16:33:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0659fd0a-0012-424c-8afa-3eda00a214d6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:54684","PortSpecifier":{"PortValue":54684}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783701222,"nanos":107953299},"http":{"id":"0659fd0a-0012-424c-8afa-3eda00a214d6","method":"POST","headers":{":authority":"e2e-shared-a-c32d0d.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T16:33:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0659fd0a-0012-424c-8afa-3eda00a214d6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-pGEmfEY7oFu7zhkC_fxCpNCgGKsox4WZDUwSyOozBzzs6mPuN7IynN0OD0dk"}
{"level":"debug","ts":"2026-07-10T16:33:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0659fd0a-0012-424c-8afa-3eda00a214d6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c32d0d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-pGEmfEY7oFu7zhkC_fxCpNCgGKsox4WZDUwSyOozBzzs6mPuN7IynN0OD0dk\"}"}
{"level":"debug","ts":"2026-07-10T16:33:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0659fd0a-0012-424c-8afa-3eda00a214d6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c32d0d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"bca3b3ed-25a3-4a9f-8262-365e937b9997","keyName":"e2e-auth-iso-a-cd3e27","subscription":"e2e-auth-iso-8637ff","tenant":"e2e-shared-a-c32d0d","userId":"bca3b3ed-25a3-4a9f-8262-365e937b9997","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T16:33:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0659fd0a-0012-424c-8afa-3eda00a214d6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T16:33:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0659fd0a-0012-424c-8afa-3eda00a214d6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:33:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0659fd0a-0012-424c-8afa-3eda00a214d6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:33:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0659fd0a-0012-424c-8afa-3eda00a214d6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c32d0d/auth-test-model-c32d0d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:33:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0659fd0a-0012-424c-8afa-3eda00a214d6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T16:33:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0659fd0a-0012-424c-8afa-3eda00a214d6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T16:33:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0659fd0a-0012-424c-8afa-3eda00a214d6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-8637ff"}
{"level":"debug","ts":"2026-07-10T16:33:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0659fd0a-0012-424c-8afa-3eda00a214d6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-10T16:33:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0659fd0a-0012-424c-8afa-3eda00a214d6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T16:33:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0659fd0a-0012-424c-8afa-3eda00a214d6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T16:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7aec9ec4346ad34e55c9003652b354c9dbd79b0cdfe1f5141710e482a08090c6"}
{"level":"info","ts":"2026-07-10T16:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/919d6ba662e389306a331f050539957c9ef7fd4662e67a8a561d57eb18cfccfb"}
{"level":"info","ts":"2026-07-10T16:33:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/24a7fcea3d451b9ff7a33a5ab5c7f9827757abe694e8ccf0c7163ef67ee4f1de"}
{"level":"info","ts":"2026-07-10T16:33:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1a0fccad80243c0c018c2a9c25a9dabbaaae03275c33c03b9dc00833c7e57491"}
{"level":"info","ts":"2026-07-10T16:33:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/97549133834e816804b4c0b2d8708d1fd4511fa72f2fc498bc9b3df9bc05dea0"}
{"level":"info","ts":"2026-07-10T16:33:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8c62b27c9470bfdfc4caba8c137ed5cf0169117e685fe98c6833c3488f8be200"}
{"level":"info","ts":"2026-07-10T16:33:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/49288de2e91895c8cb571310291a6374e96654bad43be5e7ddbfc69af1777275"}
{"level":"info","ts":"2026-07-10T16:33:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6ce5596f8d3ec58f056d4a02f7992ab2e25d909d70fe9b91d7f8fb87468273da"}
{"level":"info","ts":"2026-07-10T16:33:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ef1dd449a32928afd02c55b09ca8634554655e48b09b1037f7b53ff85d88f687"}
{"level":"info","ts":"2026-07-10T16:33:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7c59907e6cefa2f2dcc34c9b8f4a71216b86b8f3c55813a52fb02e8a9cb350fc"}
{"level":"info","ts":"2026-07-10T16:33:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e4d4dde8d7b0b060a795199bce118d3c8ae07e8bd4d90c410d8750c964ae55a4"}
{"level":"info","ts":"2026-07-10T16:33:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/10687a55bf38040f7d46c92b35973e86d00e09ee9c0e91739c7f984e118ebdb1"}
{"level":"info","ts":"2026-07-10T16:33:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/02f1569c9c8fdf9dac943860abec7078922d76e38a7f8a8fc5f30f2cb3a75043"}
{"level":"info","ts":"2026-07-10T16:33:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0d4a47da995c7d418ec2b71e21d74476f338b748a9ae57a867ac020ec567e3da"}
{"level":"info","ts":"2026-07-10T16:33:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b6fd78ced12fb7fe5878b0499cc2cce853f4e0a70c2662564511ce4f0aeb0143"}
{"level":"info","ts":"2026-07-10T16:33:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3c526abf7f59802806f8ea5df17805b13a6cabe2b6b9dcaf3d04063a9b03f5e7"}
{"level":"debug","ts":"2026-07-10T16:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d28b7273d0bf4819c14694dc71c8b9d5638d047d24bc1a5be724f2425dd1c47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:34:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:34:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d28b7273d0bf4819c14694dc71c8b9d5638d047d24bc1a5be724f2425dd1c47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d28b7273d0bf4819c14694dc71c8b9d5638d047d24bc1a5be724f2425dd1c47","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d28b7273d0bf4819c14694dc71c8b9d5638d047d24bc1a5be724f2425dd1c47"}
{"level":"debug","ts":"2026-07-10T16:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d28b7273d0bf4819c14694dc71c8b9d5638d047d24bc1a5be724f2425dd1c47","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d28b7273d0bf4819c14694dc71c8b9d5638d047d24bc1a5be724f2425dd1c47"}
{"level":"debug","ts":"2026-07-10T16:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d28b7273d0bf4819c14694dc71c8b9d5638d047d24bc1a5be724f2425dd1c47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:34:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:34:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d28b7273d0bf4819c14694dc71c8b9d5638d047d24bc1a5be724f2425dd1c47"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d28b7273d0bf4819c14694dc71c8b9d5638d047d24bc1a5be724f2425dd1c47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d28b7273d0bf4819c14694dc71c8b9d5638d047d24bc1a5be724f2425dd1c47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:34:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:34:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d28b7273d0bf4819c14694dc71c8b9d5638d047d24bc1a5be724f2425dd1c47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d28b7273d0bf4819c14694dc71c8b9d5638d047d24bc1a5be724f2425dd1c47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d28b7273d0bf4819c14694dc71c8b9d5638d047d24bc1a5be724f2425dd1c47","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d28b7273d0bf4819c14694dc71c8b9d5638d047d24bc1a5be724f2425dd1c47"}
{"level":"debug","ts":"2026-07-10T16:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d28b7273d0bf4819c14694dc71c8b9d5638d047d24bc1a5be724f2425dd1c47","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d28b7273d0bf4819c14694dc71c8b9d5638d047d24bc1a5be724f2425dd1c47"}
{"level":"debug","ts":"2026-07-10T16:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d28b7273d0bf4819c14694dc71c8b9d5638d047d24bc1a5be724f2425dd1c47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:34:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:34:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d28b7273d0bf4819c14694dc71c8b9d5638d047d24bc1a5be724f2425dd1c47"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d28b7273d0bf4819c14694dc71c8b9d5638d047d24bc1a5be724f2425dd1c47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d28b7273d0bf4819c14694dc71c8b9d5638d047d24bc1a5be724f2425dd1c47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:34:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:34:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d28b7273d0bf4819c14694dc71c8b9d5638d047d24bc1a5be724f2425dd1c47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d28b7273d0bf4819c14694dc71c8b9d5638d047d24bc1a5be724f2425dd1c47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d28b7273d0bf4819c14694dc71c8b9d5638d047d24bc1a5be724f2425dd1c47","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d28b7273d0bf4819c14694dc71c8b9d5638d047d24bc1a5be724f2425dd1c47"}
{"level":"debug","ts":"2026-07-10T16:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d28b7273d0bf4819c14694dc71c8b9d5638d047d24bc1a5be724f2425dd1c47","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d28b7273d0bf4819c14694dc71c8b9d5638d047d24bc1a5be724f2425dd1c47"}
{"level":"debug","ts":"2026-07-10T16:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d28b7273d0bf4819c14694dc71c8b9d5638d047d24bc1a5be724f2425dd1c47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:34:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:34:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d28b7273d0bf4819c14694dc71c8b9d5638d047d24bc1a5be724f2425dd1c47"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d28b7273d0bf4819c14694dc71c8b9d5638d047d24bc1a5be724f2425dd1c47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d28b7273d0bf4819c14694dc71c8b9d5638d047d24bc1a5be724f2425dd1c47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:34:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:34:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d28b7273d0bf4819c14694dc71c8b9d5638d047d24bc1a5be724f2425dd1c47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d28b7273d0bf4819c14694dc71c8b9d5638d047d24bc1a5be724f2425dd1c47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d28b7273d0bf4819c14694dc71c8b9d5638d047d24bc1a5be724f2425dd1c47","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d28b7273d0bf4819c14694dc71c8b9d5638d047d24bc1a5be724f2425dd1c47"}
{"level":"debug","ts":"2026-07-10T16:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d28b7273d0bf4819c14694dc71c8b9d5638d047d24bc1a5be724f2425dd1c47","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d28b7273d0bf4819c14694dc71c8b9d5638d047d24bc1a5be724f2425dd1c47"}
{"level":"debug","ts":"2026-07-10T16:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d28b7273d0bf4819c14694dc71c8b9d5638d047d24bc1a5be724f2425dd1c47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:34:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:34:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d28b7273d0bf4819c14694dc71c8b9d5638d047d24bc1a5be724f2425dd1c47"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d28b7273d0bf4819c14694dc71c8b9d5638d047d24bc1a5be724f2425dd1c47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d28b7273d0bf4819c14694dc71c8b9d5638d047d24bc1a5be724f2425dd1c47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:34:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:34:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d28b7273d0bf4819c14694dc71c8b9d5638d047d24bc1a5be724f2425dd1c47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d28b7273d0bf4819c14694dc71c8b9d5638d047d24bc1a5be724f2425dd1c47","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d28b7273d0bf4819c14694dc71c8b9d5638d047d24bc1a5be724f2425dd1c47"}
{"level":"debug","ts":"2026-07-10T16:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d28b7273d0bf4819c14694dc71c8b9d5638d047d24bc1a5be724f2425dd1c47","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d28b7273d0bf4819c14694dc71c8b9d5638d047d24bc1a5be724f2425dd1c47"}
{"level":"debug","ts":"2026-07-10T16:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d28b7273d0bf4819c14694dc71c8b9d5638d047d24bc1a5be724f2425dd1c47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:34:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:34:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d28b7273d0bf4819c14694dc71c8b9d5638d047d24bc1a5be724f2425dd1c47"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d28b7273d0bf4819c14694dc71c8b9d5638d047d24bc1a5be724f2425dd1c47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d28b7273d0bf4819c14694dc71c8b9d5638d047d24bc1a5be724f2425dd1c47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:34:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:34:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d28b7273d0bf4819c14694dc71c8b9d5638d047d24bc1a5be724f2425dd1c47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d28b7273d0bf4819c14694dc71c8b9d5638d047d24bc1a5be724f2425dd1c47","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d28b7273d0bf4819c14694dc71c8b9d5638d047d24bc1a5be724f2425dd1c47"}
{"level":"debug","ts":"2026-07-10T16:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d28b7273d0bf4819c14694dc71c8b9d5638d047d24bc1a5be724f2425dd1c47","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d28b7273d0bf4819c14694dc71c8b9d5638d047d24bc1a5be724f2425dd1c47"}
{"level":"debug","ts":"2026-07-10T16:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d28b7273d0bf4819c14694dc71c8b9d5638d047d24bc1a5be724f2425dd1c47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:34:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:34:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d28b7273d0bf4819c14694dc71c8b9d5638d047d24bc1a5be724f2425dd1c47"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d28b7273d0bf4819c14694dc71c8b9d5638d047d24bc1a5be724f2425dd1c47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d28b7273d0bf4819c14694dc71c8b9d5638d047d24bc1a5be724f2425dd1c47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:34:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:34:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d28b7273d0bf4819c14694dc71c8b9d5638d047d24bc1a5be724f2425dd1c47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78b6026bf09b74df2a7054b53373c3fce8858b6c1d03271e90ff77c0bd7bf5d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:34:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:34:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d28b7273d0bf4819c14694dc71c8b9d5638d047d24bc1a5be724f2425dd1c47"}
{"level":"info","ts":"2026-07-10T16:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78b6026bf09b74df2a7054b53373c3fce8858b6c1d03271e90ff77c0bd7bf5d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d28b7273d0bf4819c14694dc71c8b9d5638d047d24bc1a5be724f2425dd1c47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:34:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:34:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d28b7273d0bf4819c14694dc71c8b9d5638d047d24bc1a5be724f2425dd1c47"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78b6026bf09b74df2a7054b53373c3fce8858b6c1d03271e90ff77c0bd7bf5d6"}
{"level":"info","ts":"2026-07-10T16:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d28b7273d0bf4819c14694dc71c8b9d5638d047d24bc1a5be724f2425dd1c47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78b6026bf09b74df2a7054b53373c3fce8858b6c1d03271e90ff77c0bd7bf5d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:34:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:34:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78b6026bf09b74df2a7054b53373c3fce8858b6c1d03271e90ff77c0bd7bf5d6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78b6026bf09b74df2a7054b53373c3fce8858b6c1d03271e90ff77c0bd7bf5d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d28b7273d0bf4819c14694dc71c8b9d5638d047d24bc1a5be724f2425dd1c47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:34:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:34:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d28b7273d0bf4819c14694dc71c8b9d5638d047d24bc1a5be724f2425dd1c47"}
{"level":"info","ts":"2026-07-10T16:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d28b7273d0bf4819c14694dc71c8b9d5638d047d24bc1a5be724f2425dd1c47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78b6026bf09b74df2a7054b53373c3fce8858b6c1d03271e90ff77c0bd7bf5d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:34:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:34:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78b6026bf09b74df2a7054b53373c3fce8858b6c1d03271e90ff77c0bd7bf5d6"}
{"level":"info","ts":"2026-07-10T16:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78b6026bf09b74df2a7054b53373c3fce8858b6c1d03271e90ff77c0bd7bf5d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d28b7273d0bf4819c14694dc71c8b9d5638d047d24bc1a5be724f2425dd1c47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78b6026bf09b74df2a7054b53373c3fce8858b6c1d03271e90ff77c0bd7bf5d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:34:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:34:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78b6026bf09b74df2a7054b53373c3fce8858b6c1d03271e90ff77c0bd7bf5d6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78b6026bf09b74df2a7054b53373c3fce8858b6c1d03271e90ff77c0bd7bf5d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d28b7273d0bf4819c14694dc71c8b9d5638d047d24bc1a5be724f2425dd1c47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78b6026bf09b74df2a7054b53373c3fce8858b6c1d03271e90ff77c0bd7bf5d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:34:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:34:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78b6026bf09b74df2a7054b53373c3fce8858b6c1d03271e90ff77c0bd7bf5d6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d28b7273d0bf4819c14694dc71c8b9d5638d047d24bc1a5be724f2425dd1c47"}
{"level":"error","ts":"2026-07-10T16:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"78b6026bf09b74df2a7054b53373c3fce8858b6c1d03271e90ff77c0bd7bf5d6","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"78b6026bf09b74df2a7054b53373c3fce8858b6c1d03271e90ff77c0bd7bf5d6\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T16:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78b6026bf09b74df2a7054b53373c3fce8858b6c1d03271e90ff77c0bd7bf5d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:34:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:34:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78b6026bf09b74df2a7054b53373c3fce8858b6c1d03271e90ff77c0bd7bf5d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d28b7273d0bf4819c14694dc71c8b9d5638d047d24bc1a5be724f2425dd1c47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:34:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:34:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d28b7273d0bf4819c14694dc71c8b9d5638d047d24bc1a5be724f2425dd1c47"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78b6026bf09b74df2a7054b53373c3fce8858b6c1d03271e90ff77c0bd7bf5d6"}
{"level":"info","ts":"2026-07-10T16:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d28b7273d0bf4819c14694dc71c8b9d5638d047d24bc1a5be724f2425dd1c47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78b6026bf09b74df2a7054b53373c3fce8858b6c1d03271e90ff77c0bd7bf5d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d28b7273d0bf4819c14694dc71c8b9d5638d047d24bc1a5be724f2425dd1c47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78b6026bf09b74df2a7054b53373c3fce8858b6c1d03271e90ff77c0bd7bf5d6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78b6026bf09b74df2a7054b53373c3fce8858b6c1d03271e90ff77c0bd7bf5d6"}
{"level":"info","ts":"2026-07-10T16:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d28b7273d0bf4819c14694dc71c8b9d5638d047d24bc1a5be724f2425dd1c47"}
{"level":"debug","ts":"2026-07-10T16:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78b6026bf09b74df2a7054b53373c3fce8858b6c1d03271e90ff77c0bd7bf5d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:34:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:34:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78b6026bf09b74df2a7054b53373c3fce8858b6c1d03271e90ff77c0bd7bf5d6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78b6026bf09b74df2a7054b53373c3fce8858b6c1d03271e90ff77c0bd7bf5d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78b6026bf09b74df2a7054b53373c3fce8858b6c1d03271e90ff77c0bd7bf5d6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78b6026bf09b74df2a7054b53373c3fce8858b6c1d03271e90ff77c0bd7bf5d6"}
{"level":"debug","ts":"2026-07-10T16:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f48ff5e88c656fd586a22d18aa9f16b255c77d22144a29a4e15e7a44464deb79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:34:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:34:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f48ff5e88c656fd586a22d18aa9f16b255c77d22144a29a4e15e7a44464deb79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f48ff5e88c656fd586a22d18aa9f16b255c77d22144a29a4e15e7a44464deb79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f48ff5e88c656fd586a22d18aa9f16b255c77d22144a29a4e15e7a44464deb79","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f48ff5e88c656fd586a22d18aa9f16b255c77d22144a29a4e15e7a44464deb79"}
{"level":"debug","ts":"2026-07-10T16:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f48ff5e88c656fd586a22d18aa9f16b255c77d22144a29a4e15e7a44464deb79","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f48ff5e88c656fd586a22d18aa9f16b255c77d22144a29a4e15e7a44464deb79"}
{"level":"debug","ts":"2026-07-10T16:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f48ff5e88c656fd586a22d18aa9f16b255c77d22144a29a4e15e7a44464deb79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:34:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:34:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f48ff5e88c656fd586a22d18aa9f16b255c77d22144a29a4e15e7a44464deb79"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f48ff5e88c656fd586a22d18aa9f16b255c77d22144a29a4e15e7a44464deb79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f48ff5e88c656fd586a22d18aa9f16b255c77d22144a29a4e15e7a44464deb79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:34:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:34:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f48ff5e88c656fd586a22d18aa9f16b255c77d22144a29a4e15e7a44464deb79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f48ff5e88c656fd586a22d18aa9f16b255c77d22144a29a4e15e7a44464deb79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f48ff5e88c656fd586a22d18aa9f16b255c77d22144a29a4e15e7a44464deb79","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f48ff5e88c656fd586a22d18aa9f16b255c77d22144a29a4e15e7a44464deb79"}
{"level":"debug","ts":"2026-07-10T16:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f48ff5e88c656fd586a22d18aa9f16b255c77d22144a29a4e15e7a44464deb79","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f48ff5e88c656fd586a22d18aa9f16b255c77d22144a29a4e15e7a44464deb79"}
{"level":"debug","ts":"2026-07-10T16:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7102ea1a10e0b930d068793075af7b765ab089d3c2b20bb9b8f7000d8633c46a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:34:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:34:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7102ea1a10e0b930d068793075af7b765ab089d3c2b20bb9b8f7000d8633c46a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f48ff5e88c656fd586a22d18aa9f16b255c77d22144a29a4e15e7a44464deb79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:34:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:34:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f48ff5e88c656fd586a22d18aa9f16b255c77d22144a29a4e15e7a44464deb79"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f48ff5e88c656fd586a22d18aa9f16b255c77d22144a29a4e15e7a44464deb79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7102ea1a10e0b930d068793075af7b765ab089d3c2b20bb9b8f7000d8633c46a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f48ff5e88c656fd586a22d18aa9f16b255c77d22144a29a4e15e7a44464deb79","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7102ea1a10e0b930d068793075af7b765ab089d3c2b20bb9b8f7000d8633c46a"}
{"level":"debug","ts":"2026-07-10T16:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7102ea1a10e0b930d068793075af7b765ab089d3c2b20bb9b8f7000d8633c46a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:34:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:34:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7102ea1a10e0b930d068793075af7b765ab089d3c2b20bb9b8f7000d8633c46a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7102ea1a10e0b930d068793075af7b765ab089d3c2b20bb9b8f7000d8633c46a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7102ea1a10e0b930d068793075af7b765ab089d3c2b20bb9b8f7000d8633c46a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f48ff5e88c656fd586a22d18aa9f16b255c77d22144a29a4e15e7a44464deb79"}
{"level":"info","ts":"2026-07-10T16:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7102ea1a10e0b930d068793075af7b765ab089d3c2b20bb9b8f7000d8633c46a"}
{"level":"debug","ts":"2026-07-10T16:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73b9dc57e3f1e76322a231b20e55d2adfb15f2d27918b7b88a3e6ee9a7ebed08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:34:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:34:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73b9dc57e3f1e76322a231b20e55d2adfb15f2d27918b7b88a3e6ee9a7ebed08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73b9dc57e3f1e76322a231b20e55d2adfb15f2d27918b7b88a3e6ee9a7ebed08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73b9dc57e3f1e76322a231b20e55d2adfb15f2d27918b7b88a3e6ee9a7ebed08","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73b9dc57e3f1e76322a231b20e55d2adfb15f2d27918b7b88a3e6ee9a7ebed08"}
{"level":"debug","ts":"2026-07-10T16:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73b9dc57e3f1e76322a231b20e55d2adfb15f2d27918b7b88a3e6ee9a7ebed08","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73b9dc57e3f1e76322a231b20e55d2adfb15f2d27918b7b88a3e6ee9a7ebed08"}
{"level":"debug","ts":"2026-07-10T16:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73b9dc57e3f1e76322a231b20e55d2adfb15f2d27918b7b88a3e6ee9a7ebed08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:34:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:34:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["73b9dc57e3f1e76322a231b20e55d2adfb15f2d27918b7b88a3e6ee9a7ebed08"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73b9dc57e3f1e76322a231b20e55d2adfb15f2d27918b7b88a3e6ee9a7ebed08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73b9dc57e3f1e76322a231b20e55d2adfb15f2d27918b7b88a3e6ee9a7ebed08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:34:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:34:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73b9dc57e3f1e76322a231b20e55d2adfb15f2d27918b7b88a3e6ee9a7ebed08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2005684e2860be876010687b18913d91992314ba106952654855f1b4b06651d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:34:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:34:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73b9dc57e3f1e76322a231b20e55d2adfb15f2d27918b7b88a3e6ee9a7ebed08"}
{"level":"info","ts":"2026-07-10T16:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2005684e2860be876010687b18913d91992314ba106952654855f1b4b06651d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73b9dc57e3f1e76322a231b20e55d2adfb15f2d27918b7b88a3e6ee9a7ebed08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:34:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:34:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["73b9dc57e3f1e76322a231b20e55d2adfb15f2d27918b7b88a3e6ee9a7ebed08"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73b9dc57e3f1e76322a231b20e55d2adfb15f2d27918b7b88a3e6ee9a7ebed08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2005684e2860be876010687b18913d91992314ba106952654855f1b4b06651d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:34:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:34:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2005684e2860be876010687b18913d91992314ba106952654855f1b4b06651d"}
{"level":"info","ts":"2026-07-10T16:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2005684e2860be876010687b18913d91992314ba106952654855f1b4b06651d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73b9dc57e3f1e76322a231b20e55d2adfb15f2d27918b7b88a3e6ee9a7ebed08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:34:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:34:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73b9dc57e3f1e76322a231b20e55d2adfb15f2d27918b7b88a3e6ee9a7ebed08"}
{"level":"info","ts":"2026-07-10T16:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73b9dc57e3f1e76322a231b20e55d2adfb15f2d27918b7b88a3e6ee9a7ebed08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2005684e2860be876010687b18913d91992314ba106952654855f1b4b06651d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73b9dc57e3f1e76322a231b20e55d2adfb15f2d27918b7b88a3e6ee9a7ebed08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:34:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:34:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["73b9dc57e3f1e76322a231b20e55d2adfb15f2d27918b7b88a3e6ee9a7ebed08"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73b9dc57e3f1e76322a231b20e55d2adfb15f2d27918b7b88a3e6ee9a7ebed08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73b9dc57e3f1e76322a231b20e55d2adfb15f2d27918b7b88a3e6ee9a7ebed08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:34:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:34:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["73b9dc57e3f1e76322a231b20e55d2adfb15f2d27918b7b88a3e6ee9a7ebed08"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2005684e2860be876010687b18913d91992314ba106952654855f1b4b06651d"}
{"level":"error","ts":"2026-07-10T16:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"73b9dc57e3f1e76322a231b20e55d2adfb15f2d27918b7b88a3e6ee9a7ebed08","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"73b9dc57e3f1e76322a231b20e55d2adfb15f2d27918b7b88a3e6ee9a7ebed08\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T16:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2005684e2860be876010687b18913d91992314ba106952654855f1b4b06651d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:34:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:34:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b2005684e2860be876010687b18913d91992314ba106952654855f1b4b06651d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2005684e2860be876010687b18913d91992314ba106952654855f1b4b06651d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73b9dc57e3f1e76322a231b20e55d2adfb15f2d27918b7b88a3e6ee9a7ebed08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:34:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:34:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73b9dc57e3f1e76322a231b20e55d2adfb15f2d27918b7b88a3e6ee9a7ebed08"}
{"level":"info","ts":"2026-07-10T16:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73b9dc57e3f1e76322a231b20e55d2adfb15f2d27918b7b88a3e6ee9a7ebed08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1b6b8896c6c4d3d995d5c3f66f4b8343b197de13dd953d71ce31cd6b624e986","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:34:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:34:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1b6b8896c6c4d3d995d5c3f66f4b8343b197de13dd953d71ce31cd6b624e986"}
{"level":"info","ts":"2026-07-10T16:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1b6b8896c6c4d3d995d5c3f66f4b8343b197de13dd953d71ce31cd6b624e986","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2005684e2860be876010687b18913d91992314ba106952654855f1b4b06651d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:34:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:34:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2005684e2860be876010687b18913d91992314ba106952654855f1b4b06651d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e79d30b49e8c7e3fedfbe5aec12d722e49294dd0b714682353e3440634ead514","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:34:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:34:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2005684e2860be876010687b18913d91992314ba106952654855f1b4b06651d"}
{"level":"info","ts":"2026-07-10T16:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e79d30b49e8c7e3fedfbe5aec12d722e49294dd0b714682353e3440634ead514","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73b9dc57e3f1e76322a231b20e55d2adfb15f2d27918b7b88a3e6ee9a7ebed08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:34:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:34:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["73b9dc57e3f1e76322a231b20e55d2adfb15f2d27918b7b88a3e6ee9a7ebed08"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e79d30b49e8c7e3fedfbe5aec12d722e49294dd0b714682353e3440634ead514"}
{"level":"info","ts":"2026-07-10T16:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73b9dc57e3f1e76322a231b20e55d2adfb15f2d27918b7b88a3e6ee9a7ebed08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1b6b8896c6c4d3d995d5c3f66f4b8343b197de13dd953d71ce31cd6b624e986","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:34:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:34:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1b6b8896c6c4d3d995d5c3f66f4b8343b197de13dd953d71ce31cd6b624e986"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1b6b8896c6c4d3d995d5c3f66f4b8343b197de13dd953d71ce31cd6b624e986","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2005684e2860be876010687b18913d91992314ba106952654855f1b4b06651d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:34:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:34:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b2005684e2860be876010687b18913d91992314ba106952654855f1b4b06651d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73b9dc57e3f1e76322a231b20e55d2adfb15f2d27918b7b88a3e6ee9a7ebed08"}
{"level":"info","ts":"2026-07-10T16:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2005684e2860be876010687b18913d91992314ba106952654855f1b4b06651d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e79d30b49e8c7e3fedfbe5aec12d722e49294dd0b714682353e3440634ead514","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:34:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:34:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e79d30b49e8c7e3fedfbe5aec12d722e49294dd0b714682353e3440634ead514"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1b6b8896c6c4d3d995d5c3f66f4b8343b197de13dd953d71ce31cd6b624e986"}
{"level":"info","ts":"2026-07-10T16:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e79d30b49e8c7e3fedfbe5aec12d722e49294dd0b714682353e3440634ead514","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73b9dc57e3f1e76322a231b20e55d2adfb15f2d27918b7b88a3e6ee9a7ebed08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1b6b8896c6c4d3d995d5c3f66f4b8343b197de13dd953d71ce31cd6b624e986","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2005684e2860be876010687b18913d91992314ba106952654855f1b4b06651d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:34:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:34:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2005684e2860be876010687b18913d91992314ba106952654855f1b4b06651d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e79d30b49e8c7e3fedfbe5aec12d722e49294dd0b714682353e3440634ead514","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2005684e2860be876010687b18913d91992314ba106952654855f1b4b06651d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2005684e2860be876010687b18913d91992314ba106952654855f1b4b06651d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2005684e2860be876010687b18913d91992314ba106952654855f1b4b06651d"}
{"level":"debug","ts":"2026-07-10T16:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2005684e2860be876010687b18913d91992314ba106952654855f1b4b06651d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:34:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:34:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b2005684e2860be876010687b18913d91992314ba106952654855f1b4b06651d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e79d30b49e8c7e3fedfbe5aec12d722e49294dd0b714682353e3440634ead514"}
{"level":"info","ts":"2026-07-10T16:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2005684e2860be876010687b18913d91992314ba106952654855f1b4b06651d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2005684e2860be876010687b18913d91992314ba106952654855f1b4b06651d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73b9dc57e3f1e76322a231b20e55d2adfb15f2d27918b7b88a3e6ee9a7ebed08"}
{"level":"info","ts":"2026-07-10T16:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2005684e2860be876010687b18913d91992314ba106952654855f1b4b06651d"}
{"level":"debug","ts":"2026-07-10T16:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fe273bf420ec25478b1ad8b778642903e790307a26a99b312f1112f6cf78a42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:34:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:34:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fe273bf420ec25478b1ad8b778642903e790307a26a99b312f1112f6cf78a42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fe273bf420ec25478b1ad8b778642903e790307a26a99b312f1112f6cf78a42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fe273bf420ec25478b1ad8b778642903e790307a26a99b312f1112f6cf78a42","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fe273bf420ec25478b1ad8b778642903e790307a26a99b312f1112f6cf78a42"}
{"level":"debug","ts":"2026-07-10T16:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fe273bf420ec25478b1ad8b778642903e790307a26a99b312f1112f6cf78a42","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fe273bf420ec25478b1ad8b778642903e790307a26a99b312f1112f6cf78a42"}
{"level":"debug","ts":"2026-07-10T16:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fe273bf420ec25478b1ad8b778642903e790307a26a99b312f1112f6cf78a42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:34:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:34:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1fe273bf420ec25478b1ad8b778642903e790307a26a99b312f1112f6cf78a42"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fe273bf420ec25478b1ad8b778642903e790307a26a99b312f1112f6cf78a42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fe273bf420ec25478b1ad8b778642903e790307a26a99b312f1112f6cf78a42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:34:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:34:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fe273bf420ec25478b1ad8b778642903e790307a26a99b312f1112f6cf78a42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fe273bf420ec25478b1ad8b778642903e790307a26a99b312f1112f6cf78a42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fe273bf420ec25478b1ad8b778642903e790307a26a99b312f1112f6cf78a42","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fe273bf420ec25478b1ad8b778642903e790307a26a99b312f1112f6cf78a42"}
{"level":"debug","ts":"2026-07-10T16:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fe273bf420ec25478b1ad8b778642903e790307a26a99b312f1112f6cf78a42","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fe273bf420ec25478b1ad8b778642903e790307a26a99b312f1112f6cf78a42"}
{"level":"debug","ts":"2026-07-10T16:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fe273bf420ec25478b1ad8b778642903e790307a26a99b312f1112f6cf78a42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:34:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:34:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1fe273bf420ec25478b1ad8b778642903e790307a26a99b312f1112f6cf78a42"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fe273bf420ec25478b1ad8b778642903e790307a26a99b312f1112f6cf78a42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fe273bf420ec25478b1ad8b778642903e790307a26a99b312f1112f6cf78a42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:34:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:34:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fe273bf420ec25478b1ad8b778642903e790307a26a99b312f1112f6cf78a42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fe273bf420ec25478b1ad8b778642903e790307a26a99b312f1112f6cf78a42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fe273bf420ec25478b1ad8b778642903e790307a26a99b312f1112f6cf78a42","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fe273bf420ec25478b1ad8b778642903e790307a26a99b312f1112f6cf78a42"}
{"level":"debug","ts":"2026-07-10T16:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fe273bf420ec25478b1ad8b778642903e790307a26a99b312f1112f6cf78a42","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fe273bf420ec25478b1ad8b778642903e790307a26a99b312f1112f6cf78a42"}
{"level":"debug","ts":"2026-07-10T16:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fe273bf420ec25478b1ad8b778642903e790307a26a99b312f1112f6cf78a42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:34:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:34:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1fe273bf420ec25478b1ad8b778642903e790307a26a99b312f1112f6cf78a42"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fe273bf420ec25478b1ad8b778642903e790307a26a99b312f1112f6cf78a42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fe273bf420ec25478b1ad8b778642903e790307a26a99b312f1112f6cf78a42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:34:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:34:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fe273bf420ec25478b1ad8b778642903e790307a26a99b312f1112f6cf78a42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fe273bf420ec25478b1ad8b778642903e790307a26a99b312f1112f6cf78a42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fe273bf420ec25478b1ad8b778642903e790307a26a99b312f1112f6cf78a42","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fe273bf420ec25478b1ad8b778642903e790307a26a99b312f1112f6cf78a42"}
{"level":"debug","ts":"2026-07-10T16:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fe273bf420ec25478b1ad8b778642903e790307a26a99b312f1112f6cf78a42","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fe273bf420ec25478b1ad8b778642903e790307a26a99b312f1112f6cf78a42"}
{"level":"debug","ts":"2026-07-10T16:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fe273bf420ec25478b1ad8b778642903e790307a26a99b312f1112f6cf78a42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:34:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:34:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1fe273bf420ec25478b1ad8b778642903e790307a26a99b312f1112f6cf78a42"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fe273bf420ec25478b1ad8b778642903e790307a26a99b312f1112f6cf78a42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fe273bf420ec25478b1ad8b778642903e790307a26a99b312f1112f6cf78a42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:34:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:34:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fe273bf420ec25478b1ad8b778642903e790307a26a99b312f1112f6cf78a42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fe273bf420ec25478b1ad8b778642903e790307a26a99b312f1112f6cf78a42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fe273bf420ec25478b1ad8b778642903e790307a26a99b312f1112f6cf78a42","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fe273bf420ec25478b1ad8b778642903e790307a26a99b312f1112f6cf78a42"}
{"level":"debug","ts":"2026-07-10T16:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fe273bf420ec25478b1ad8b778642903e790307a26a99b312f1112f6cf78a42","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fe273bf420ec25478b1ad8b778642903e790307a26a99b312f1112f6cf78a42"}
{"level":"debug","ts":"2026-07-10T16:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fe273bf420ec25478b1ad8b778642903e790307a26a99b312f1112f6cf78a42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:34:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:34:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1fe273bf420ec25478b1ad8b778642903e790307a26a99b312f1112f6cf78a42"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fe273bf420ec25478b1ad8b778642903e790307a26a99b312f1112f6cf78a42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fe273bf420ec25478b1ad8b778642903e790307a26a99b312f1112f6cf78a42","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fe273bf420ec25478b1ad8b778642903e790307a26a99b312f1112f6cf78a42"}
{"level":"debug","ts":"2026-07-10T16:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d674748a4602d689bbdeaf2a856a40c34016bb3bd5eb8d7c794de6bb478c982","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:34:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:34:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d674748a4602d689bbdeaf2a856a40c34016bb3bd5eb8d7c794de6bb478c982","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d674748a4602d689bbdeaf2a856a40c34016bb3bd5eb8d7c794de6bb478c982","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d674748a4602d689bbdeaf2a856a40c34016bb3bd5eb8d7c794de6bb478c982","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d674748a4602d689bbdeaf2a856a40c34016bb3bd5eb8d7c794de6bb478c982"}
{"level":"debug","ts":"2026-07-10T16:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d674748a4602d689bbdeaf2a856a40c34016bb3bd5eb8d7c794de6bb478c982","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d674748a4602d689bbdeaf2a856a40c34016bb3bd5eb8d7c794de6bb478c982"}
{"level":"debug","ts":"2026-07-10T16:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d674748a4602d689bbdeaf2a856a40c34016bb3bd5eb8d7c794de6bb478c982","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:34:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:34:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0d674748a4602d689bbdeaf2a856a40c34016bb3bd5eb8d7c794de6bb478c982"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d674748a4602d689bbdeaf2a856a40c34016bb3bd5eb8d7c794de6bb478c982","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d306f54e444932450dfc2b9e56be8c3f5ef8def69c52e9ef20099096b8e71d99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:34:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:34:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d306f54e444932450dfc2b9e56be8c3f5ef8def69c52e9ef20099096b8e71d99","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d674748a4602d689bbdeaf2a856a40c34016bb3bd5eb8d7c794de6bb478c982","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d75f30bc6dfe43b055a37559ec0696b08b928a13797516d7d2279164e7960007","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:34:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:34:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d306f54e444932450dfc2b9e56be8c3f5ef8def69c52e9ef20099096b8e71d99"}
{"level":"info","ts":"2026-07-10T16:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d75f30bc6dfe43b055a37559ec0696b08b928a13797516d7d2279164e7960007","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d306f54e444932450dfc2b9e56be8c3f5ef8def69c52e9ef20099096b8e71d99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:34:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:34:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d306f54e444932450dfc2b9e56be8c3f5ef8def69c52e9ef20099096b8e71d99"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d674748a4602d689bbdeaf2a856a40c34016bb3bd5eb8d7c794de6bb478c982"}
{"level":"info","ts":"2026-07-10T16:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d306f54e444932450dfc2b9e56be8c3f5ef8def69c52e9ef20099096b8e71d99","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d75f30bc6dfe43b055a37559ec0696b08b928a13797516d7d2279164e7960007","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:34:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:34:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d75f30bc6dfe43b055a37559ec0696b08b928a13797516d7d2279164e7960007","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d306f54e444932450dfc2b9e56be8c3f5ef8def69c52e9ef20099096b8e71d99","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d75f30bc6dfe43b055a37559ec0696b08b928a13797516d7d2279164e7960007","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d75f30bc6dfe43b055a37559ec0696b08b928a13797516d7d2279164e7960007"}
{"level":"debug","ts":"2026-07-10T16:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d75f30bc6dfe43b055a37559ec0696b08b928a13797516d7d2279164e7960007","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:34:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:34:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d75f30bc6dfe43b055a37559ec0696b08b928a13797516d7d2279164e7960007"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d75f30bc6dfe43b055a37559ec0696b08b928a13797516d7d2279164e7960007","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d75f30bc6dfe43b055a37559ec0696b08b928a13797516d7d2279164e7960007","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d306f54e444932450dfc2b9e56be8c3f5ef8def69c52e9ef20099096b8e71d99"}
{"level":"info","ts":"2026-07-10T16:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d75f30bc6dfe43b055a37559ec0696b08b928a13797516d7d2279164e7960007"}
{"level":"debug","ts":"2026-07-10T16:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"181355a4f060693ce26f78b6f6ad09831673994aefdcd8b357fd02f3f389a8aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:34:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:34:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"181355a4f060693ce26f78b6f6ad09831673994aefdcd8b357fd02f3f389a8aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"181355a4f060693ce26f78b6f6ad09831673994aefdcd8b357fd02f3f389a8aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:34:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:34:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/181355a4f060693ce26f78b6f6ad09831673994aefdcd8b357fd02f3f389a8aa"}
{"level":"info","ts":"2026-07-10T16:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"181355a4f060693ce26f78b6f6ad09831673994aefdcd8b357fd02f3f389a8aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"181355a4f060693ce26f78b6f6ad09831673994aefdcd8b357fd02f3f389a8aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:34:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:34:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-10T16:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"181355a4f060693ce26f78b6f6ad09831673994aefdcd8b357fd02f3f389a8aa","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"181355a4f060693ce26f78b6f6ad09831673994aefdcd8b357fd02f3f389a8aa\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T16:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"181355a4f060693ce26f78b6f6ad09831673994aefdcd8b357fd02f3f389a8aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"181355a4f060693ce26f78b6f6ad09831673994aefdcd8b357fd02f3f389a8aa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/181355a4f060693ce26f78b6f6ad09831673994aefdcd8b357fd02f3f389a8aa"}
{"level":"info","ts":"2026-07-10T16:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/181355a4f060693ce26f78b6f6ad09831673994aefdcd8b357fd02f3f389a8aa"}
{"level":"debug","ts":"2026-07-10T16:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4262f8cdd20e7075dfb73bceabc86f4d9155e3318efa87e5f56e88138ece6d2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:34:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:34:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4262f8cdd20e7075dfb73bceabc86f4d9155e3318efa87e5f56e88138ece6d2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4262f8cdd20e7075dfb73bceabc86f4d9155e3318efa87e5f56e88138ece6d2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"181355a4f060693ce26f78b6f6ad09831673994aefdcd8b357fd02f3f389a8aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:34:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:34:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["181355a4f060693ce26f78b6f6ad09831673994aefdcd8b357fd02f3f389a8aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4262f8cdd20e7075dfb73bceabc86f4d9155e3318efa87e5f56e88138ece6d2f"}
{"level":"info","ts":"2026-07-10T16:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"181355a4f060693ce26f78b6f6ad09831673994aefdcd8b357fd02f3f389a8aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4262f8cdd20e7075dfb73bceabc86f4d9155e3318efa87e5f56e88138ece6d2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"181355a4f060693ce26f78b6f6ad09831673994aefdcd8b357fd02f3f389a8aa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4262f8cdd20e7075dfb73bceabc86f4d9155e3318efa87e5f56e88138ece6d2f"}
{"level":"debug","ts":"2026-07-10T16:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4262f8cdd20e7075dfb73bceabc86f4d9155e3318efa87e5f56e88138ece6d2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:34:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:34:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4262f8cdd20e7075dfb73bceabc86f4d9155e3318efa87e5f56e88138ece6d2f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/181355a4f060693ce26f78b6f6ad09831673994aefdcd8b357fd02f3f389a8aa"}
{"level":"info","ts":"2026-07-10T16:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4262f8cdd20e7075dfb73bceabc86f4d9155e3318efa87e5f56e88138ece6d2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4262f8cdd20e7075dfb73bceabc86f4d9155e3318efa87e5f56e88138ece6d2f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4262f8cdd20e7075dfb73bceabc86f4d9155e3318efa87e5f56e88138ece6d2f"}
{"level":"debug","ts":"2026-07-10T16:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34c804c040a589d4bd865ef0944410361f29be95167dbb627886fb8db697bc23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:34:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:34:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34c804c040a589d4bd865ef0944410361f29be95167dbb627886fb8db697bc23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34c804c040a589d4bd865ef0944410361f29be95167dbb627886fb8db697bc23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34c804c040a589d4bd865ef0944410361f29be95167dbb627886fb8db697bc23","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34c804c040a589d4bd865ef0944410361f29be95167dbb627886fb8db697bc23"}
{"level":"debug","ts":"2026-07-10T16:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34c804c040a589d4bd865ef0944410361f29be95167dbb627886fb8db697bc23","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34c804c040a589d4bd865ef0944410361f29be95167dbb627886fb8db697bc23"}
{"level":"debug","ts":"2026-07-10T16:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34c804c040a589d4bd865ef0944410361f29be95167dbb627886fb8db697bc23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:34:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:34:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34c804c040a589d4bd865ef0944410361f29be95167dbb627886fb8db697bc23"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34c804c040a589d4bd865ef0944410361f29be95167dbb627886fb8db697bc23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34c804c040a589d4bd865ef0944410361f29be95167dbb627886fb8db697bc23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:34:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:34:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34c804c040a589d4bd865ef0944410361f29be95167dbb627886fb8db697bc23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34c804c040a589d4bd865ef0944410361f29be95167dbb627886fb8db697bc23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34c804c040a589d4bd865ef0944410361f29be95167dbb627886fb8db697bc23","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34c804c040a589d4bd865ef0944410361f29be95167dbb627886fb8db697bc23"}
{"level":"debug","ts":"2026-07-10T16:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34c804c040a589d4bd865ef0944410361f29be95167dbb627886fb8db697bc23","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34c804c040a589d4bd865ef0944410361f29be95167dbb627886fb8db697bc23"}
{"level":"debug","ts":"2026-07-10T16:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34c804c040a589d4bd865ef0944410361f29be95167dbb627886fb8db697bc23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:34:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:34:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34c804c040a589d4bd865ef0944410361f29be95167dbb627886fb8db697bc23"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34c804c040a589d4bd865ef0944410361f29be95167dbb627886fb8db697bc23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34c804c040a589d4bd865ef0944410361f29be95167dbb627886fb8db697bc23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a876533d03a8a02518daafa92de1fa93a1889791fe9efdf841b287fcd5b4cfbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:34:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:34:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34c804c040a589d4bd865ef0944410361f29be95167dbb627886fb8db697bc23"}
{"level":"info","ts":"2026-07-10T16:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a876533d03a8a02518daafa92de1fa93a1889791fe9efdf841b287fcd5b4cfbf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a876533d03a8a02518daafa92de1fa93a1889791fe9efdf841b287fcd5b4cfbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:34:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:34:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a876533d03a8a02518daafa92de1fa93a1889791fe9efdf841b287fcd5b4cfbf"}
{"level":"info","ts":"2026-07-10T16:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a876533d03a8a02518daafa92de1fa93a1889791fe9efdf841b287fcd5b4cfbf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a876533d03a8a02518daafa92de1fa93a1889791fe9efdf841b287fcd5b4cfbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:34:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:34:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-10T16:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a876533d03a8a02518daafa92de1fa93a1889791fe9efdf841b287fcd5b4cfbf","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a876533d03a8a02518daafa92de1fa93a1889791fe9efdf841b287fcd5b4cfbf\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T16:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a876533d03a8a02518daafa92de1fa93a1889791fe9efdf841b287fcd5b4cfbf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a876533d03a8a02518daafa92de1fa93a1889791fe9efdf841b287fcd5b4cfbf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a876533d03a8a02518daafa92de1fa93a1889791fe9efdf841b287fcd5b4cfbf"}
{"level":"info","ts":"2026-07-10T16:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a876533d03a8a02518daafa92de1fa93a1889791fe9efdf841b287fcd5b4cfbf"}
{"level":"debug","ts":"2026-07-10T16:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a876533d03a8a02518daafa92de1fa93a1889791fe9efdf841b287fcd5b4cfbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:34:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:34:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a876533d03a8a02518daafa92de1fa93a1889791fe9efdf841b287fcd5b4cfbf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a876533d03a8a02518daafa92de1fa93a1889791fe9efdf841b287fcd5b4cfbf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a876533d03a8a02518daafa92de1fa93a1889791fe9efdf841b287fcd5b4cfbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:34:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:34:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a876533d03a8a02518daafa92de1fa93a1889791fe9efdf841b287fcd5b4cfbf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a876533d03a8a02518daafa92de1fa93a1889791fe9efdf841b287fcd5b4cfbf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a876533d03a8a02518daafa92de1fa93a1889791fe9efdf841b287fcd5b4cfbf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a876533d03a8a02518daafa92de1fa93a1889791fe9efdf841b287fcd5b4cfbf"}
{"level":"debug","ts":"2026-07-10T16:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a876533d03a8a02518daafa92de1fa93a1889791fe9efdf841b287fcd5b4cfbf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a876533d03a8a02518daafa92de1fa93a1889791fe9efdf841b287fcd5b4cfbf"}
{"level":"debug","ts":"2026-07-10T16:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a876533d03a8a02518daafa92de1fa93a1889791fe9efdf841b287fcd5b4cfbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:34:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:34:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a876533d03a8a02518daafa92de1fa93a1889791fe9efdf841b287fcd5b4cfbf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a876533d03a8a02518daafa92de1fa93a1889791fe9efdf841b287fcd5b4cfbf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a876533d03a8a02518daafa92de1fa93a1889791fe9efdf841b287fcd5b4cfbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:34:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:34:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a876533d03a8a02518daafa92de1fa93a1889791fe9efdf841b287fcd5b4cfbf"}
{"level":"info","ts":"2026-07-10T16:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a876533d03a8a02518daafa92de1fa93a1889791fe9efdf841b287fcd5b4cfbf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a876533d03a8a02518daafa92de1fa93a1889791fe9efdf841b287fcd5b4cfbf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a876533d03a8a02518daafa92de1fa93a1889791fe9efdf841b287fcd5b4cfbf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a876533d03a8a02518daafa92de1fa93a1889791fe9efdf841b287fcd5b4cfbf"}
{"level":"debug","ts":"2026-07-10T16:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a876533d03a8a02518daafa92de1fa93a1889791fe9efdf841b287fcd5b4cfbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:34:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:34:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a876533d03a8a02518daafa92de1fa93a1889791fe9efdf841b287fcd5b4cfbf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a876533d03a8a02518daafa92de1fa93a1889791fe9efdf841b287fcd5b4cfbf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a876533d03a8a02518daafa92de1fa93a1889791fe9efdf841b287fcd5b4cfbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:34:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:34:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a876533d03a8a02518daafa92de1fa93a1889791fe9efdf841b287fcd5b4cfbf"}
{"level":"info","ts":"2026-07-10T16:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a876533d03a8a02518daafa92de1fa93a1889791fe9efdf841b287fcd5b4cfbf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a876533d03a8a02518daafa92de1fa93a1889791fe9efdf841b287fcd5b4cfbf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a876533d03a8a02518daafa92de1fa93a1889791fe9efdf841b287fcd5b4cfbf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a876533d03a8a02518daafa92de1fa93a1889791fe9efdf841b287fcd5b4cfbf"}
{"level":"debug","ts":"2026-07-10T16:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a876533d03a8a02518daafa92de1fa93a1889791fe9efdf841b287fcd5b4cfbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:34:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:34:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a876533d03a8a02518daafa92de1fa93a1889791fe9efdf841b287fcd5b4cfbf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a876533d03a8a02518daafa92de1fa93a1889791fe9efdf841b287fcd5b4cfbf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a876533d03a8a02518daafa92de1fa93a1889791fe9efdf841b287fcd5b4cfbf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a876533d03a8a02518daafa92de1fa93a1889791fe9efdf841b287fcd5b4cfbf"}
{"level":"debug","ts":"2026-07-10T16:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7721743ad43c20bb21e8bfc1f5884927cdb097bfbb99562ebf2df3758f664b96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:34:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:34:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7721743ad43c20bb21e8bfc1f5884927cdb097bfbb99562ebf2df3758f664b96","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7721743ad43c20bb21e8bfc1f5884927cdb097bfbb99562ebf2df3758f664b96","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7721743ad43c20bb21e8bfc1f5884927cdb097bfbb99562ebf2df3758f664b96","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7721743ad43c20bb21e8bfc1f5884927cdb097bfbb99562ebf2df3758f664b96"}
{"level":"debug","ts":"2026-07-10T16:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7721743ad43c20bb21e8bfc1f5884927cdb097bfbb99562ebf2df3758f664b96","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7721743ad43c20bb21e8bfc1f5884927cdb097bfbb99562ebf2df3758f664b96"}
{"level":"debug","ts":"2026-07-10T16:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7721743ad43c20bb21e8bfc1f5884927cdb097bfbb99562ebf2df3758f664b96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:34:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:34:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7721743ad43c20bb21e8bfc1f5884927cdb097bfbb99562ebf2df3758f664b96"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7721743ad43c20bb21e8bfc1f5884927cdb097bfbb99562ebf2df3758f664b96","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7721743ad43c20bb21e8bfc1f5884927cdb097bfbb99562ebf2df3758f664b96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:34:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:34:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7721743ad43c20bb21e8bfc1f5884927cdb097bfbb99562ebf2df3758f664b96","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7721743ad43c20bb21e8bfc1f5884927cdb097bfbb99562ebf2df3758f664b96","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7721743ad43c20bb21e8bfc1f5884927cdb097bfbb99562ebf2df3758f664b96","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7721743ad43c20bb21e8bfc1f5884927cdb097bfbb99562ebf2df3758f664b96"}
{"level":"debug","ts":"2026-07-10T16:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7721743ad43c20bb21e8bfc1f5884927cdb097bfbb99562ebf2df3758f664b96","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7721743ad43c20bb21e8bfc1f5884927cdb097bfbb99562ebf2df3758f664b96"}
{"level":"debug","ts":"2026-07-10T16:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7721743ad43c20bb21e8bfc1f5884927cdb097bfbb99562ebf2df3758f664b96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:34:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:34:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7721743ad43c20bb21e8bfc1f5884927cdb097bfbb99562ebf2df3758f664b96"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7721743ad43c20bb21e8bfc1f5884927cdb097bfbb99562ebf2df3758f664b96","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7721743ad43c20bb21e8bfc1f5884927cdb097bfbb99562ebf2df3758f664b96","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7721743ad43c20bb21e8bfc1f5884927cdb097bfbb99562ebf2df3758f664b96"}
{"level":"debug","ts":"2026-07-10T16:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9820940ea561ac7233f172e32ee5331166ec7b68699ae5eb20ae3735d956d6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:34:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:34:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9820940ea561ac7233f172e32ee5331166ec7b68699ae5eb20ae3735d956d6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9820940ea561ac7233f172e32ee5331166ec7b68699ae5eb20ae3735d956d6c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9820940ea561ac7233f172e32ee5331166ec7b68699ae5eb20ae3735d956d6c"}
{"level":"debug","ts":"2026-07-10T16:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9820940ea561ac7233f172e32ee5331166ec7b68699ae5eb20ae3735d956d6c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9820940ea561ac7233f172e32ee5331166ec7b68699ae5eb20ae3735d956d6c"}
{"level":"debug","ts":"2026-07-10T16:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9820940ea561ac7233f172e32ee5331166ec7b68699ae5eb20ae3735d956d6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:34:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:34:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d9820940ea561ac7233f172e32ee5331166ec7b68699ae5eb20ae3735d956d6c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9820940ea561ac7233f172e32ee5331166ec7b68699ae5eb20ae3735d956d6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9820940ea561ac7233f172e32ee5331166ec7b68699ae5eb20ae3735d956d6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:34:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:34:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9820940ea561ac7233f172e32ee5331166ec7b68699ae5eb20ae3735d956d6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9820940ea561ac7233f172e32ee5331166ec7b68699ae5eb20ae3735d956d6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9820940ea561ac7233f172e32ee5331166ec7b68699ae5eb20ae3735d956d6c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9820940ea561ac7233f172e32ee5331166ec7b68699ae5eb20ae3735d956d6c"}
{"level":"debug","ts":"2026-07-10T16:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9820940ea561ac7233f172e32ee5331166ec7b68699ae5eb20ae3735d956d6c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9820940ea561ac7233f172e32ee5331166ec7b68699ae5eb20ae3735d956d6c"}
{"level":"debug","ts":"2026-07-10T16:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9820940ea561ac7233f172e32ee5331166ec7b68699ae5eb20ae3735d956d6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:34:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:34:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d9820940ea561ac7233f172e32ee5331166ec7b68699ae5eb20ae3735d956d6c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9820940ea561ac7233f172e32ee5331166ec7b68699ae5eb20ae3735d956d6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9820940ea561ac7233f172e32ee5331166ec7b68699ae5eb20ae3735d956d6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:34:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:34:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9820940ea561ac7233f172e32ee5331166ec7b68699ae5eb20ae3735d956d6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9820940ea561ac7233f172e32ee5331166ec7b68699ae5eb20ae3735d956d6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9820940ea561ac7233f172e32ee5331166ec7b68699ae5eb20ae3735d956d6c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9820940ea561ac7233f172e32ee5331166ec7b68699ae5eb20ae3735d956d6c"}
{"level":"debug","ts":"2026-07-10T16:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d306f54e444932450dfc2b9e56be8c3f5ef8def69c52e9ef20099096b8e71d99","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9820940ea561ac7233f172e32ee5331166ec7b68699ae5eb20ae3735d956d6c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9820940ea561ac7233f172e32ee5331166ec7b68699ae5eb20ae3735d956d6c"}
{"level":"info","ts":"2026-07-10T16:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d306f54e444932450dfc2b9e56be8c3f5ef8def69c52e9ef20099096b8e71d99"}
{"level":"debug","ts":"2026-07-10T16:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9820940ea561ac7233f172e32ee5331166ec7b68699ae5eb20ae3735d956d6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:34:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:34:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d9820940ea561ac7233f172e32ee5331166ec7b68699ae5eb20ae3735d956d6c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9820940ea561ac7233f172e32ee5331166ec7b68699ae5eb20ae3735d956d6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9820940ea561ac7233f172e32ee5331166ec7b68699ae5eb20ae3735d956d6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:34:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:34:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9820940ea561ac7233f172e32ee5331166ec7b68699ae5eb20ae3735d956d6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9820940ea561ac7233f172e32ee5331166ec7b68699ae5eb20ae3735d956d6c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9820940ea561ac7233f172e32ee5331166ec7b68699ae5eb20ae3735d956d6c"}
{"level":"debug","ts":"2026-07-10T16:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9820940ea561ac7233f172e32ee5331166ec7b68699ae5eb20ae3735d956d6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9820940ea561ac7233f172e32ee5331166ec7b68699ae5eb20ae3735d956d6c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9820940ea561ac7233f172e32ee5331166ec7b68699ae5eb20ae3735d956d6c"}
{"level":"debug","ts":"2026-07-10T16:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9820940ea561ac7233f172e32ee5331166ec7b68699ae5eb20ae3735d956d6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:34:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:34:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d9820940ea561ac7233f172e32ee5331166ec7b68699ae5eb20ae3735d956d6c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9820940ea561ac7233f172e32ee5331166ec7b68699ae5eb20ae3735d956d6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9820940ea561ac7233f172e32ee5331166ec7b68699ae5eb20ae3735d956d6c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9820940ea561ac7233f172e32ee5331166ec7b68699ae5eb20ae3735d956d6c"}
{"level":"debug","ts":"2026-07-10T16:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a5c276c68701b91aa220d9445d305e58706ac1451887ccb2873ccfb5b643af6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:34:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:34:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a5c276c68701b91aa220d9445d305e58706ac1451887ccb2873ccfb5b643af6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a5c276c68701b91aa220d9445d305e58706ac1451887ccb2873ccfb5b643af6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f82f20d238e2ca215eff3d03db3f776b2de4f33dd8ec5567b7ccd28186e798a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a5c276c68701b91aa220d9445d305e58706ac1451887ccb2873ccfb5b643af6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a5c276c68701b91aa220d9445d305e58706ac1451887ccb2873ccfb5b643af6"}
{"level":"debug","ts":"2026-07-10T16:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a5c276c68701b91aa220d9445d305e58706ac1451887ccb2873ccfb5b643af6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:34:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:34:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9a5c276c68701b91aa220d9445d305e58706ac1451887ccb2873ccfb5b643af6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f82f20d238e2ca215eff3d03db3f776b2de4f33dd8ec5567b7ccd28186e798a2"}
{"level":"info","ts":"2026-07-10T16:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a5c276c68701b91aa220d9445d305e58706ac1451887ccb2873ccfb5b643af6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a5c276c68701b91aa220d9445d305e58706ac1451887ccb2873ccfb5b643af6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:34:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:34:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a5c276c68701b91aa220d9445d305e58706ac1451887ccb2873ccfb5b643af6"}
{"level":"info","ts":"2026-07-10T16:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a5c276c68701b91aa220d9445d305e58706ac1451887ccb2873ccfb5b643af6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a5c276c68701b91aa220d9445d305e58706ac1451887ccb2873ccfb5b643af6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a5c276c68701b91aa220d9445d305e58706ac1451887ccb2873ccfb5b643af6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a5c276c68701b91aa220d9445d305e58706ac1451887ccb2873ccfb5b643af6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e79d30b49e8c7e3fedfbe5aec12d722e49294dd0b714682353e3440634ead514","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a5c276c68701b91aa220d9445d305e58706ac1451887ccb2873ccfb5b643af6"}
{"level":"debug","ts":"2026-07-10T16:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a5c276c68701b91aa220d9445d305e58706ac1451887ccb2873ccfb5b643af6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:34:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:34:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9a5c276c68701b91aa220d9445d305e58706ac1451887ccb2873ccfb5b643af6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e79d30b49e8c7e3fedfbe5aec12d722e49294dd0b714682353e3440634ead514"}
{"level":"info","ts":"2026-07-10T16:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a5c276c68701b91aa220d9445d305e58706ac1451887ccb2873ccfb5b643af6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a5c276c68701b91aa220d9445d305e58706ac1451887ccb2873ccfb5b643af6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:34:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:34:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a5c276c68701b91aa220d9445d305e58706ac1451887ccb2873ccfb5b643af6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a5c276c68701b91aa220d9445d305e58706ac1451887ccb2873ccfb5b643af6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a5c276c68701b91aa220d9445d305e58706ac1451887ccb2873ccfb5b643af6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a5c276c68701b91aa220d9445d305e58706ac1451887ccb2873ccfb5b643af6"}
{"level":"debug","ts":"2026-07-10T16:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2005684e2860be876010687b18913d91992314ba106952654855f1b4b06651d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a5c276c68701b91aa220d9445d305e58706ac1451887ccb2873ccfb5b643af6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a5c276c68701b91aa220d9445d305e58706ac1451887ccb2873ccfb5b643af6"}
{"level":"info","ts":"2026-07-10T16:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2005684e2860be876010687b18913d91992314ba106952654855f1b4b06651d"}
{"level":"debug","ts":"2026-07-10T16:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a5c276c68701b91aa220d9445d305e58706ac1451887ccb2873ccfb5b643af6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:34:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:34:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9a5c276c68701b91aa220d9445d305e58706ac1451887ccb2873ccfb5b643af6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a5c276c68701b91aa220d9445d305e58706ac1451887ccb2873ccfb5b643af6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a5c276c68701b91aa220d9445d305e58706ac1451887ccb2873ccfb5b643af6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a5c276c68701b91aa220d9445d305e58706ac1451887ccb2873ccfb5b643af6"}
{"level":"debug","ts":"2026-07-10T16:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34c804c040a589d4bd865ef0944410361f29be95167dbb627886fb8db697bc23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:34:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:34:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34c804c040a589d4bd865ef0944410361f29be95167dbb627886fb8db697bc23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34c804c040a589d4bd865ef0944410361f29be95167dbb627886fb8db697bc23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1b6b8896c6c4d3d995d5c3f66f4b8343b197de13dd953d71ce31cd6b624e986","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34c804c040a589d4bd865ef0944410361f29be95167dbb627886fb8db697bc23","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34c804c040a589d4bd865ef0944410361f29be95167dbb627886fb8db697bc23"}
{"level":"debug","ts":"2026-07-10T16:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34c804c040a589d4bd865ef0944410361f29be95167dbb627886fb8db697bc23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:34:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:34:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34c804c040a589d4bd865ef0944410361f29be95167dbb627886fb8db697bc23"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1b6b8896c6c4d3d995d5c3f66f4b8343b197de13dd953d71ce31cd6b624e986"}
{"level":"info","ts":"2026-07-10T16:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34c804c040a589d4bd865ef0944410361f29be95167dbb627886fb8db697bc23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34c804c040a589d4bd865ef0944410361f29be95167dbb627886fb8db697bc23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:34:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:34:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34c804c040a589d4bd865ef0944410361f29be95167dbb627886fb8db697bc23"}
{"level":"info","ts":"2026-07-10T16:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34c804c040a589d4bd865ef0944410361f29be95167dbb627886fb8db697bc23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34c804c040a589d4bd865ef0944410361f29be95167dbb627886fb8db697bc23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34c804c040a589d4bd865ef0944410361f29be95167dbb627886fb8db697bc23","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34c804c040a589d4bd865ef0944410361f29be95167dbb627886fb8db697bc23"}
{"level":"debug","ts":"2026-07-10T16:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34c804c040a589d4bd865ef0944410361f29be95167dbb627886fb8db697bc23","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34c804c040a589d4bd865ef0944410361f29be95167dbb627886fb8db697bc23"}
{"level":"debug","ts":"2026-07-10T16:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34c804c040a589d4bd865ef0944410361f29be95167dbb627886fb8db697bc23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:34:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:34:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34c804c040a589d4bd865ef0944410361f29be95167dbb627886fb8db697bc23"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34c804c040a589d4bd865ef0944410361f29be95167dbb627886fb8db697bc23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34c804c040a589d4bd865ef0944410361f29be95167dbb627886fb8db697bc23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:34:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:34:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34c804c040a589d4bd865ef0944410361f29be95167dbb627886fb8db697bc23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34c804c040a589d4bd865ef0944410361f29be95167dbb627886fb8db697bc23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34c804c040a589d4bd865ef0944410361f29be95167dbb627886fb8db697bc23","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34c804c040a589d4bd865ef0944410361f29be95167dbb627886fb8db697bc23"}
{"level":"debug","ts":"2026-07-10T16:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34c804c040a589d4bd865ef0944410361f29be95167dbb627886fb8db697bc23","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34c804c040a589d4bd865ef0944410361f29be95167dbb627886fb8db697bc23"}
{"level":"debug","ts":"2026-07-10T16:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fe273bf420ec25478b1ad8b778642903e790307a26a99b312f1112f6cf78a42","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fe273bf420ec25478b1ad8b778642903e790307a26a99b312f1112f6cf78a42"}
{"level":"debug","ts":"2026-07-10T16:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34c804c040a589d4bd865ef0944410361f29be95167dbb627886fb8db697bc23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:34:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:34:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34c804c040a589d4bd865ef0944410361f29be95167dbb627886fb8db697bc23"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34c804c040a589d4bd865ef0944410361f29be95167dbb627886fb8db697bc23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34c804c040a589d4bd865ef0944410361f29be95167dbb627886fb8db697bc23","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34c804c040a589d4bd865ef0944410361f29be95167dbb627886fb8db697bc23"}
{"level":"debug","ts":"2026-07-10T16:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d674748a4602d689bbdeaf2a856a40c34016bb3bd5eb8d7c794de6bb478c982","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:34:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:34:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d674748a4602d689bbdeaf2a856a40c34016bb3bd5eb8d7c794de6bb478c982","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d674748a4602d689bbdeaf2a856a40c34016bb3bd5eb8d7c794de6bb478c982","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d674748a4602d689bbdeaf2a856a40c34016bb3bd5eb8d7c794de6bb478c982","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d674748a4602d689bbdeaf2a856a40c34016bb3bd5eb8d7c794de6bb478c982"}
{"level":"debug","ts":"2026-07-10T16:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d674748a4602d689bbdeaf2a856a40c34016bb3bd5eb8d7c794de6bb478c982","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d674748a4602d689bbdeaf2a856a40c34016bb3bd5eb8d7c794de6bb478c982"}
{"level":"debug","ts":"2026-07-10T16:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d674748a4602d689bbdeaf2a856a40c34016bb3bd5eb8d7c794de6bb478c982","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:34:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:34:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0d674748a4602d689bbdeaf2a856a40c34016bb3bd5eb8d7c794de6bb478c982"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d674748a4602d689bbdeaf2a856a40c34016bb3bd5eb8d7c794de6bb478c982","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d674748a4602d689bbdeaf2a856a40c34016bb3bd5eb8d7c794de6bb478c982","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:34:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:34:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d674748a4602d689bbdeaf2a856a40c34016bb3bd5eb8d7c794de6bb478c982","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b85944d46cb0fc25a732050670e3c03c485e9f3366f7b98af2162775b3fd965","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d674748a4602d689bbdeaf2a856a40c34016bb3bd5eb8d7c794de6bb478c982","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d28b7273d0bf4819c14694dc71c8b9d5638d047d24bc1a5be724f2425dd1c47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d674748a4602d689bbdeaf2a856a40c34016bb3bd5eb8d7c794de6bb478c982","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d674748a4602d689bbdeaf2a856a40c34016bb3bd5eb8d7c794de6bb478c982"}
{"level":"debug","ts":"2026-07-10T16:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d674748a4602d689bbdeaf2a856a40c34016bb3bd5eb8d7c794de6bb478c982","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:34:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:34:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0d674748a4602d689bbdeaf2a856a40c34016bb3bd5eb8d7c794de6bb478c982"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b85944d46cb0fc25a732050670e3c03c485e9f3366f7b98af2162775b3fd965"}
{"level":"info","ts":"2026-07-10T16:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d674748a4602d689bbdeaf2a856a40c34016bb3bd5eb8d7c794de6bb478c982","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d674748a4602d689bbdeaf2a856a40c34016bb3bd5eb8d7c794de6bb478c982","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d28b7273d0bf4819c14694dc71c8b9d5638d047d24bc1a5be724f2425dd1c47"}
{"level":"info","ts":"2026-07-10T16:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d674748a4602d689bbdeaf2a856a40c34016bb3bd5eb8d7c794de6bb478c982"}
{"level":"debug","ts":"2026-07-10T16:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e838baba826e016bf3e907ef3289699aedfd7707968047696d2bc8d7dffeb8b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:34:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:34:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e838baba826e016bf3e907ef3289699aedfd7707968047696d2bc8d7dffeb8b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e838baba826e016bf3e907ef3289699aedfd7707968047696d2bc8d7dffeb8b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d75f30bc6dfe43b055a37559ec0696b08b928a13797516d7d2279164e7960007","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e838baba826e016bf3e907ef3289699aedfd7707968047696d2bc8d7dffeb8b7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e838baba826e016bf3e907ef3289699aedfd7707968047696d2bc8d7dffeb8b7"}
{"level":"debug","ts":"2026-07-10T16:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73b9dc57e3f1e76322a231b20e55d2adfb15f2d27918b7b88a3e6ee9a7ebed08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e838baba826e016bf3e907ef3289699aedfd7707968047696d2bc8d7dffeb8b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:34:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:34:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e838baba826e016bf3e907ef3289699aedfd7707968047696d2bc8d7dffeb8b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d75f30bc6dfe43b055a37559ec0696b08b928a13797516d7d2279164e7960007"}
{"level":"info","ts":"2026-07-10T16:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e838baba826e016bf3e907ef3289699aedfd7707968047696d2bc8d7dffeb8b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f48ff5e88c656fd586a22d18aa9f16b255c77d22144a29a4e15e7a44464deb79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e838baba826e016bf3e907ef3289699aedfd7707968047696d2bc8d7dffeb8b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:34:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:34:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e838baba826e016bf3e907ef3289699aedfd7707968047696d2bc8d7dffeb8b7"}
{"level":"info","ts":"2026-07-10T16:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e838baba826e016bf3e907ef3289699aedfd7707968047696d2bc8d7dffeb8b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e838baba826e016bf3e907ef3289699aedfd7707968047696d2bc8d7dffeb8b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:34:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:34:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e838baba826e016bf3e907ef3289699aedfd7707968047696d2bc8d7dffeb8b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e838baba826e016bf3e907ef3289699aedfd7707968047696d2bc8d7dffeb8b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e838baba826e016bf3e907ef3289699aedfd7707968047696d2bc8d7dffeb8b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:34:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:34:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e838baba826e016bf3e907ef3289699aedfd7707968047696d2bc8d7dffeb8b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73b9dc57e3f1e76322a231b20e55d2adfb15f2d27918b7b88a3e6ee9a7ebed08"}
{"level":"error","ts":"2026-07-10T16:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e838baba826e016bf3e907ef3289699aedfd7707968047696d2bc8d7dffeb8b7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e838baba826e016bf3e907ef3289699aedfd7707968047696d2bc8d7dffeb8b7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T16:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e838baba826e016bf3e907ef3289699aedfd7707968047696d2bc8d7dffeb8b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93c555b1065512c5684811d38f24e050e04f087a711f9950c3b4d132b51540f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e838baba826e016bf3e907ef3289699aedfd7707968047696d2bc8d7dffeb8b7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f48ff5e88c656fd586a22d18aa9f16b255c77d22144a29a4e15e7a44464deb79"}
{"level":"debug","ts":"2026-07-10T16:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4262f8cdd20e7075dfb73bceabc86f4d9155e3318efa87e5f56e88138ece6d2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"181355a4f060693ce26f78b6f6ad09831673994aefdcd8b357fd02f3f389a8aa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e838baba826e016bf3e907ef3289699aedfd7707968047696d2bc8d7dffeb8b7"}
{"level":"info","ts":"2026-07-10T16:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93c555b1065512c5684811d38f24e050e04f087a711f9950c3b4d132b51540f2"}
{"level":"info","ts":"2026-07-10T16:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4262f8cdd20e7075dfb73bceabc86f4d9155e3318efa87e5f56e88138ece6d2f"}
{"level":"info","ts":"2026-07-10T16:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/181355a4f060693ce26f78b6f6ad09831673994aefdcd8b357fd02f3f389a8aa"}
{"level":"debug","ts":"2026-07-10T16:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7102ea1a10e0b930d068793075af7b765ab089d3c2b20bb9b8f7000d8633c46a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:34:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:34:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7102ea1a10e0b930d068793075af7b765ab089d3c2b20bb9b8f7000d8633c46a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7102ea1a10e0b930d068793075af7b765ab089d3c2b20bb9b8f7000d8633c46a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7102ea1a10e0b930d068793075af7b765ab089d3c2b20bb9b8f7000d8633c46a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7102ea1a10e0b930d068793075af7b765ab089d3c2b20bb9b8f7000d8633c46a"}
{"level":"debug","ts":"2026-07-10T16:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7102ea1a10e0b930d068793075af7b765ab089d3c2b20bb9b8f7000d8633c46a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7102ea1a10e0b930d068793075af7b765ab089d3c2b20bb9b8f7000d8633c46a"}
{"level":"debug","ts":"2026-07-10T16:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7102ea1a10e0b930d068793075af7b765ab089d3c2b20bb9b8f7000d8633c46a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:34:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:34:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7102ea1a10e0b930d068793075af7b765ab089d3c2b20bb9b8f7000d8633c46a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7102ea1a10e0b930d068793075af7b765ab089d3c2b20bb9b8f7000d8633c46a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7102ea1a10e0b930d068793075af7b765ab089d3c2b20bb9b8f7000d8633c46a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:34:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:34:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7102ea1a10e0b930d068793075af7b765ab089d3c2b20bb9b8f7000d8633c46a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a876533d03a8a02518daafa92de1fa93a1889791fe9efdf841b287fcd5b4cfbf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7102ea1a10e0b930d068793075af7b765ab089d3c2b20bb9b8f7000d8633c46a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7102ea1a10e0b930d068793075af7b765ab089d3c2b20bb9b8f7000d8633c46a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7102ea1a10e0b930d068793075af7b765ab089d3c2b20bb9b8f7000d8633c46a"}
{"level":"debug","ts":"2026-07-10T16:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7102ea1a10e0b930d068793075af7b765ab089d3c2b20bb9b8f7000d8633c46a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:34:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:34:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7102ea1a10e0b930d068793075af7b765ab089d3c2b20bb9b8f7000d8633c46a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a876533d03a8a02518daafa92de1fa93a1889791fe9efdf841b287fcd5b4cfbf"}
{"level":"info","ts":"2026-07-10T16:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7102ea1a10e0b930d068793075af7b765ab089d3c2b20bb9b8f7000d8633c46a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7102ea1a10e0b930d068793075af7b765ab089d3c2b20bb9b8f7000d8633c46a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:34:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:34:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7102ea1a10e0b930d068793075af7b765ab089d3c2b20bb9b8f7000d8633c46a"}
{"level":"info","ts":"2026-07-10T16:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7102ea1a10e0b930d068793075af7b765ab089d3c2b20bb9b8f7000d8633c46a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7102ea1a10e0b930d068793075af7b765ab089d3c2b20bb9b8f7000d8633c46a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7102ea1a10e0b930d068793075af7b765ab089d3c2b20bb9b8f7000d8633c46a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7102ea1a10e0b930d068793075af7b765ab089d3c2b20bb9b8f7000d8633c46a"}
{"level":"debug","ts":"2026-07-10T16:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7102ea1a10e0b930d068793075af7b765ab089d3c2b20bb9b8f7000d8633c46a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e49051792b57df5810fde9b861812a25231a47623393de5f45505cc93d8fbc54","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7102ea1a10e0b930d068793075af7b765ab089d3c2b20bb9b8f7000d8633c46a"}
{"level":"debug","ts":"2026-07-10T16:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78b6026bf09b74df2a7054b53373c3fce8858b6c1d03271e90ff77c0bd7bf5d6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e49051792b57df5810fde9b861812a25231a47623393de5f45505cc93d8fbc54"}
{"level":"debug","ts":"2026-07-10T16:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7102ea1a10e0b930d068793075af7b765ab089d3c2b20bb9b8f7000d8633c46a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:34:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:34:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7102ea1a10e0b930d068793075af7b765ab089d3c2b20bb9b8f7000d8633c46a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7102ea1a10e0b930d068793075af7b765ab089d3c2b20bb9b8f7000d8633c46a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7102ea1a10e0b930d068793075af7b765ab089d3c2b20bb9b8f7000d8633c46a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78b6026bf09b74df2a7054b53373c3fce8858b6c1d03271e90ff77c0bd7bf5d6"}
{"level":"info","ts":"2026-07-10T16:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7102ea1a10e0b930d068793075af7b765ab089d3c2b20bb9b8f7000d8633c46a"}
{"level":"info","ts":"2026-07-10T16:35:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ce452b62-4995-4cd1-bba7-54d7c385eda8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:56380","PortSpecifier":{"PortValue":56380}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ce452b62-4995-4cd1-bba7-54d7c385eda8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-c32d0d.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T16:35:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ce452b62-4995-4cd1-bba7-54d7c385eda8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:56380","PortSpecifier":{"PortValue":56380}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783701303,"nanos":634357757},"http":{"id":"ce452b62-4995-4cd1-bba7-54d7c385eda8","method":"POST","headers":{":authority":"e2e-shared-a-c32d0d.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T16:35:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ce452b62-4995-4cd1-bba7-54d7c385eda8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T16:35:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ce452b62-4995-4cd1-bba7-54d7c385eda8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7a40ffd7-a182-4c3c-800e-1500d8c71f55","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=140fc507-4b2c-41b0-acee-fa2979abe5ce"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9a27fba088"]}}
{"level":"debug","ts":"2026-07-10T16:35:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ce452b62-4995-4cd1-bba7-54d7c385eda8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9a27fba088"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=140fc507-4b2c-41b0-acee-fa2979abe5ce"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7a40ffd7-a182-4c3c-800e-1500d8c71f55","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e49051792b57df5810fde9b861812a25231a47623393de5f45505cc93d8fbc54"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c32d0d.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T16:35:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce452b62-4995-4cd1-bba7-54d7c385eda8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:35:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce452b62-4995-4cd1-bba7-54d7c385eda8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:35:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce452b62-4995-4cd1-bba7-54d7c385eda8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c32d0d/sub-test-model-c32d0d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:35:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ce452b62-4995-4cd1-bba7-54d7c385eda8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T16:35:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce452b62-4995-4cd1-bba7-54d7c385eda8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T16:35:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce452b62-4995-4cd1-bba7-54d7c385eda8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T16:35:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ce452b62-4995-4cd1-bba7-54d7c385eda8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T16:35:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ce452b62-4995-4cd1-bba7-54d7c385eda8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T16:35:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1e2fce31-29e0-4a0d-972f-47be8d1fa26e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:33844","PortSpecifier":{"PortValue":33844}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1e2fce31-29e0-4a0d-972f-47be8d1fa26e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-466b1a.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T16:35:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1e2fce31-29e0-4a0d-972f-47be8d1fa26e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:33844","PortSpecifier":{"PortValue":33844}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783701303,"nanos":676480013},"http":{"id":"1e2fce31-29e0-4a0d-972f-47be8d1fa26e","method":"POST","headers":{":authority":"e2e-shared-b-466b1a.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T16:35:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1e2fce31-29e0-4a0d-972f-47be8d1fa26e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T16:35:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1e2fce31-29e0-4a0d-972f-47be8d1fa26e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7a40ffd7-a182-4c3c-800e-1500d8c71f55","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=140fc507-4b2c-41b0-acee-fa2979abe5ce"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9a27fba088"]}}
{"level":"debug","ts":"2026-07-10T16:35:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1e2fce31-29e0-4a0d-972f-47be8d1fa26e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9a27fba088"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=140fc507-4b2c-41b0-acee-fa2979abe5ce"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7a40ffd7-a182-4c3c-800e-1500d8c71f55","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e838baba826e016bf3e907ef3289699aedfd7707968047696d2bc8d7dffeb8b7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-466b1a.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T16:35:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1e2fce31-29e0-4a0d-972f-47be8d1fa26e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:35:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1e2fce31-29e0-4a0d-972f-47be8d1fa26e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:35:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1e2fce31-29e0-4a0d-972f-47be8d1fa26e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-466b1a/sub-test-model-466b1a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:35:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1e2fce31-29e0-4a0d-972f-47be8d1fa26e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T16:35:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1e2fce31-29e0-4a0d-972f-47be8d1fa26e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T16:35:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1e2fce31-29e0-4a0d-972f-47be8d1fa26e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-10T16:35:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1e2fce31-29e0-4a0d-972f-47be8d1fa26e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T16:35:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1e2fce31-29e0-4a0d-972f-47be8d1fa26e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T16:35:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f4f8edea-e8ce-477d-9ca6-dc7115629202","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:56382","PortSpecifier":{"PortValue":56382}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f4f8edea-e8ce-477d-9ca6-dc7115629202","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-c32d0d.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T16:35:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f4f8edea-e8ce-477d-9ca6-dc7115629202","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:56382","PortSpecifier":{"PortValue":56382}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783701303,"nanos":723437814},"http":{"id":"f4f8edea-e8ce-477d-9ca6-dc7115629202","method":"GET","headers":{":authority":"e2e-shared-a-c32d0d.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T16:35:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f4f8edea-e8ce-477d-9ca6-dc7115629202","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-19qNHqpccmBN3uXjn_6ldwpCBFI8tbRIfVRLjbVI6Zb3vHgeJc3pW3bYfyiBN"}
{"level":"debug","ts":"2026-07-10T16:35:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f4f8edea-e8ce-477d-9ca6-dc7115629202","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c32d0d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-19qNHqpccmBN3uXjn_6ldwpCBFI8tbRIfVRLjbVI6Zb3vHgeJc3pW3bYfyiBN\"}"}
{"level":"debug","ts":"2026-07-10T16:35:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f4f8edea-e8ce-477d-9ca6-dc7115629202","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c32d0d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"72674d45-c9fe-4daf-8755-cc9baf853eab","keyName":"e2e-sub-iso-67f2fb","subscription":"e2e-a-only-321a41","tenant":"e2e-shared-a-c32d0d","userId":"72674d45-c9fe-4daf-8755-cc9baf853eab","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T16:35:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f4f8edea-e8ce-477d-9ca6-dc7115629202","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T16:35:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4f8edea-e8ce-477d-9ca6-dc7115629202","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:35:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4f8edea-e8ce-477d-9ca6-dc7115629202","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:35:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4f8edea-e8ce-477d-9ca6-dc7115629202","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c32d0d/sub-test-model-c32d0d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:35:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f4f8edea-e8ce-477d-9ca6-dc7115629202","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-10T16:35:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f4f8edea-e8ce-477d-9ca6-dc7115629202","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T16:35:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f4f8edea-e8ce-477d-9ca6-dc7115629202","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T16:35:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f4f8edea-e8ce-477d-9ca6-dc7115629202","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-321a41"}
{"level":"info","ts":"2026-07-10T16:35:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f4f8edea-e8ce-477d-9ca6-dc7115629202","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T16:35:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f4f8edea-e8ce-477d-9ca6-dc7115629202","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T16:35:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bf53b065-ce54-4479-b97b-7d919fe4b1e0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:33852","PortSpecifier":{"PortValue":33852}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bf53b065-ce54-4479-b97b-7d919fe4b1e0","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-466b1a.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T16:35:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bf53b065-ce54-4479-b97b-7d919fe4b1e0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:33852","PortSpecifier":{"PortValue":33852}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783701303,"nanos":786736584},"http":{"id":"bf53b065-ce54-4479-b97b-7d919fe4b1e0","method":"GET","headers":{":authority":"e2e-shared-b-466b1a.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T16:35:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bf53b065-ce54-4479-b97b-7d919fe4b1e0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-lpdiiO7pq43oLXQf_VeQrTXz4UVeH77yN0q1bqtK0NYwdP3Ke6Balj1sv2wx"}
{"level":"debug","ts":"2026-07-10T16:35:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bf53b065-ce54-4479-b97b-7d919fe4b1e0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-466b1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-lpdiiO7pq43oLXQf_VeQrTXz4UVeH77yN0q1bqtK0NYwdP3Ke6Balj1sv2wx\"}"}
{"level":"debug","ts":"2026-07-10T16:35:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bf53b065-ce54-4479-b97b-7d919fe4b1e0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-466b1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"11831e58-2340-44c8-bf7d-0039284d0a8b","keyName":"e2e-sub-iso-959506","subscription":"e2e-b-only-321a41","tenant":"e2e-shared-b-466b1a","userId":"11831e58-2340-44c8-bf7d-0039284d0a8b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T16:35:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bf53b065-ce54-4479-b97b-7d919fe4b1e0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T16:35:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bf53b065-ce54-4479-b97b-7d919fe4b1e0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:35:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bf53b065-ce54-4479-b97b-7d919fe4b1e0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:35:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bf53b065-ce54-4479-b97b-7d919fe4b1e0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-466b1a/sub-test-model-466b1a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:35:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bf53b065-ce54-4479-b97b-7d919fe4b1e0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T16:35:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bf53b065-ce54-4479-b97b-7d919fe4b1e0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T16:35:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bf53b065-ce54-4479-b97b-7d919fe4b1e0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-10T16:35:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bf53b065-ce54-4479-b97b-7d919fe4b1e0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-321a41"}
{"level":"info","ts":"2026-07-10T16:35:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bf53b065-ce54-4479-b97b-7d919fe4b1e0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T16:35:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bf53b065-ce54-4479-b97b-7d919fe4b1e0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T16:35:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f12703b8-7f0e-424b-8fe0-5d3047033750","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:34440","PortSpecifier":{"PortValue":34440}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f12703b8-7f0e-424b-8fe0-5d3047033750","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-c32d0d.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T16:35:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f12703b8-7f0e-424b-8fe0-5d3047033750","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:34440","PortSpecifier":{"PortValue":34440}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783701313,"nanos":901915748},"http":{"id":"f12703b8-7f0e-424b-8fe0-5d3047033750","method":"POST","headers":{":authority":"e2e-shared-a-c32d0d.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T16:35:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f12703b8-7f0e-424b-8fe0-5d3047033750","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T16:35:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f12703b8-7f0e-424b-8fe0-5d3047033750","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7a40ffd7-a182-4c3c-800e-1500d8c71f55","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=140fc507-4b2c-41b0-acee-fa2979abe5ce"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9a27fba088"]}}
{"level":"debug","ts":"2026-07-10T16:35:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f12703b8-7f0e-424b-8fe0-5d3047033750","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9a27fba088"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=140fc507-4b2c-41b0-acee-fa2979abe5ce"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7a40ffd7-a182-4c3c-800e-1500d8c71f55","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e49051792b57df5810fde9b861812a25231a47623393de5f45505cc93d8fbc54"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c32d0d.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T16:35:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f12703b8-7f0e-424b-8fe0-5d3047033750","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:35:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f12703b8-7f0e-424b-8fe0-5d3047033750","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:35:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f12703b8-7f0e-424b-8fe0-5d3047033750","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c32d0d/sub-test-model-c32d0d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:35:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f12703b8-7f0e-424b-8fe0-5d3047033750","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T16:35:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f12703b8-7f0e-424b-8fe0-5d3047033750","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T16:35:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f12703b8-7f0e-424b-8fe0-5d3047033750","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-10T16:35:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f12703b8-7f0e-424b-8fe0-5d3047033750","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T16:35:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f12703b8-7f0e-424b-8fe0-5d3047033750","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T16:35:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"320d9ead-3448-4dc3-994e-539af60dea21","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:46082","PortSpecifier":{"PortValue":46082}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"320d9ead-3448-4dc3-994e-539af60dea21","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-466b1a.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T16:35:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"320d9ead-3448-4dc3-994e-539af60dea21","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:46082","PortSpecifier":{"PortValue":46082}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783701313,"nanos":940134913},"http":{"id":"320d9ead-3448-4dc3-994e-539af60dea21","method":"POST","headers":{":authority":"e2e-shared-b-466b1a.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T16:35:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"320d9ead-3448-4dc3-994e-539af60dea21","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T16:35:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"320d9ead-3448-4dc3-994e-539af60dea21","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7a40ffd7-a182-4c3c-800e-1500d8c71f55","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=140fc507-4b2c-41b0-acee-fa2979abe5ce"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9a27fba088"]}}
{"level":"debug","ts":"2026-07-10T16:35:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"320d9ead-3448-4dc3-994e-539af60dea21","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9a27fba088"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=140fc507-4b2c-41b0-acee-fa2979abe5ce"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7a40ffd7-a182-4c3c-800e-1500d8c71f55","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e838baba826e016bf3e907ef3289699aedfd7707968047696d2bc8d7dffeb8b7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-466b1a.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T16:35:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"320d9ead-3448-4dc3-994e-539af60dea21","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:35:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"320d9ead-3448-4dc3-994e-539af60dea21","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:35:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"320d9ead-3448-4dc3-994e-539af60dea21","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-466b1a/sub-test-model-466b1a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:35:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"320d9ead-3448-4dc3-994e-539af60dea21","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T16:35:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"320d9ead-3448-4dc3-994e-539af60dea21","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T16:35:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"320d9ead-3448-4dc3-994e-539af60dea21","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T16:35:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"320d9ead-3448-4dc3-994e-539af60dea21","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T16:35:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"320d9ead-3448-4dc3-994e-539af60dea21","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T16:35:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"048c8c04-8619-47cc-a5d0-d37d8ccb986e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:34448","PortSpecifier":{"PortValue":34448}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"048c8c04-8619-47cc-a5d0-d37d8ccb986e","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-c32d0d.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T16:35:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"048c8c04-8619-47cc-a5d0-d37d8ccb986e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:34448","PortSpecifier":{"PortValue":34448}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783701313,"nanos":984454911},"http":{"id":"048c8c04-8619-47cc-a5d0-d37d8ccb986e","method":"POST","headers":{":authority":"e2e-shared-a-c32d0d.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T16:35:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"048c8c04-8619-47cc-a5d0-d37d8ccb986e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1P9JmWtdWdod9x1UK_oNIV24obtaRNd7N3F12piy3UTR6PqRemsm5ZBRqognb"}
{"level":"debug","ts":"2026-07-10T16:35:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"048c8c04-8619-47cc-a5d0-d37d8ccb986e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c32d0d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1P9JmWtdWdod9x1UK_oNIV24obtaRNd7N3F12piy3UTR6PqRemsm5ZBRqognb\"}"}
{"level":"debug","ts":"2026-07-10T16:35:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"048c8c04-8619-47cc-a5d0-d37d8ccb986e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c32d0d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"438644f2-f439-46a0-b145-4b5cd2c99a61","keyName":"e2e-sub-iso-4896e8","subscription":"e2e-shared-sub-276da0","tenant":"e2e-shared-a-c32d0d","userId":"438644f2-f439-46a0-b145-4b5cd2c99a61","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T16:35:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"048c8c04-8619-47cc-a5d0-d37d8ccb986e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T16:35:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"048c8c04-8619-47cc-a5d0-d37d8ccb986e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:35:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"048c8c04-8619-47cc-a5d0-d37d8ccb986e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:35:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"048c8c04-8619-47cc-a5d0-d37d8ccb986e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c32d0d/sub-test-model-c32d0d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:35:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"048c8c04-8619-47cc-a5d0-d37d8ccb986e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-276da0"}
{"level":"debug","ts":"2026-07-10T16:35:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"048c8c04-8619-47cc-a5d0-d37d8ccb986e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T16:35:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"048c8c04-8619-47cc-a5d0-d37d8ccb986e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-10T16:35:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"048c8c04-8619-47cc-a5d0-d37d8ccb986e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-10T16:35:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"048c8c04-8619-47cc-a5d0-d37d8ccb986e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T16:35:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"048c8c04-8619-47cc-a5d0-d37d8ccb986e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T16:35:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"492b6624-e70a-417f-b5e0-e8688805d3bb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:46086","PortSpecifier":{"PortValue":46086}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"492b6624-e70a-417f-b5e0-e8688805d3bb","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-466b1a.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T16:35:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"492b6624-e70a-417f-b5e0-e8688805d3bb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:46086","PortSpecifier":{"PortValue":46086}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783701314,"nanos":17387802},"http":{"id":"492b6624-e70a-417f-b5e0-e8688805d3bb","method":"POST","headers":{":authority":"e2e-shared-b-466b1a.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T16:35:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"492b6624-e70a-417f-b5e0-e8688805d3bb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1f1P8jqXR2APWJPZ4_CkPOLGAeMnzUUg3EUQqr7fcd3FUIYhpW1gfkMLvink3"}
{"level":"debug","ts":"2026-07-10T16:35:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"492b6624-e70a-417f-b5e0-e8688805d3bb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-466b1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1f1P8jqXR2APWJPZ4_CkPOLGAeMnzUUg3EUQqr7fcd3FUIYhpW1gfkMLvink3\"}"}
{"level":"debug","ts":"2026-07-10T16:35:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"492b6624-e70a-417f-b5e0-e8688805d3bb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-466b1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"eff5a7af-ad8c-44c3-9e6b-f5c790b70557","keyName":"e2e-sub-iso-953567","subscription":"e2e-shared-sub-276da0","tenant":"e2e-shared-b-466b1a","userId":"eff5a7af-ad8c-44c3-9e6b-f5c790b70557","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T16:35:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"492b6624-e70a-417f-b5e0-e8688805d3bb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T16:35:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"492b6624-e70a-417f-b5e0-e8688805d3bb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:35:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"492b6624-e70a-417f-b5e0-e8688805d3bb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:35:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"492b6624-e70a-417f-b5e0-e8688805d3bb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-466b1a/sub-test-model-466b1a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:35:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"492b6624-e70a-417f-b5e0-e8688805d3bb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T16:35:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"492b6624-e70a-417f-b5e0-e8688805d3bb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-276da0"}
{"level":"debug","ts":"2026-07-10T16:35:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"492b6624-e70a-417f-b5e0-e8688805d3bb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-10T16:35:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"492b6624-e70a-417f-b5e0-e8688805d3bb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T16:35:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"492b6624-e70a-417f-b5e0-e8688805d3bb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T16:35:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"492b6624-e70a-417f-b5e0-e8688805d3bb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T16:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f1b6b8896c6c4d3d995d5c3f66f4b8343b197de13dd953d71ce31cd6b624e986"}
{"level":"info","ts":"2026-07-10T16:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/73b9dc57e3f1e76322a231b20e55d2adfb15f2d27918b7b88a3e6ee9a7ebed08"}
{"level":"info","ts":"2026-07-10T16:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d306f54e444932450dfc2b9e56be8c3f5ef8def69c52e9ef20099096b8e71d99"}
{"level":"info","ts":"2026-07-10T16:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7102ea1a10e0b930d068793075af7b765ab089d3c2b20bb9b8f7000d8633c46a"}
{"level":"info","ts":"2026-07-10T16:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6d28b7273d0bf4819c14694dc71c8b9d5638d047d24bc1a5be724f2425dd1c47"}
{"level":"info","ts":"2026-07-10T16:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b2005684e2860be876010687b18913d91992314ba106952654855f1b4b06651d"}
{"level":"info","ts":"2026-07-10T16:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d75f30bc6dfe43b055a37559ec0696b08b928a13797516d7d2279164e7960007"}
{"level":"info","ts":"2026-07-10T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/34c804c040a589d4bd865ef0944410361f29be95167dbb627886fb8db697bc23"}
{"level":"info","ts":"2026-07-10T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f48ff5e88c656fd586a22d18aa9f16b255c77d22144a29a4e15e7a44464deb79"}
{"level":"info","ts":"2026-07-10T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0d674748a4602d689bbdeaf2a856a40c34016bb3bd5eb8d7c794de6bb478c982"}
{"level":"info","ts":"2026-07-10T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/181355a4f060693ce26f78b6f6ad09831673994aefdcd8b357fd02f3f389a8aa"}
{"level":"info","ts":"2026-07-10T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/78b6026bf09b74df2a7054b53373c3fce8858b6c1d03271e90ff77c0bd7bf5d6"}
{"level":"info","ts":"2026-07-10T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4262f8cdd20e7075dfb73bceabc86f4d9155e3318efa87e5f56e88138ece6d2f"}
{"level":"info","ts":"2026-07-10T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1fe273bf420ec25478b1ad8b778642903e790307a26a99b312f1112f6cf78a42"}
{"level":"info","ts":"2026-07-10T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e79d30b49e8c7e3fedfbe5aec12d722e49294dd0b714682353e3440634ead514"}
{"level":"info","ts":"2026-07-10T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a876533d03a8a02518daafa92de1fa93a1889791fe9efdf841b287fcd5b4cfbf"}
{"level":"debug","ts":"2026-07-10T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8718cca200123536ff9c6a928499f568651f0fb2029df043192484544fdf7e99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:35:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:35:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8718cca200123536ff9c6a928499f568651f0fb2029df043192484544fdf7e99","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8718cca200123536ff9c6a928499f568651f0fb2029df043192484544fdf7e99","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8718cca200123536ff9c6a928499f568651f0fb2029df043192484544fdf7e99","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8718cca200123536ff9c6a928499f568651f0fb2029df043192484544fdf7e99"}
{"level":"debug","ts":"2026-07-10T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8718cca200123536ff9c6a928499f568651f0fb2029df043192484544fdf7e99","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8718cca200123536ff9c6a928499f568651f0fb2029df043192484544fdf7e99"}
{"level":"debug","ts":"2026-07-10T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8718cca200123536ff9c6a928499f568651f0fb2029df043192484544fdf7e99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:35:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:35:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8718cca200123536ff9c6a928499f568651f0fb2029df043192484544fdf7e99"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8718cca200123536ff9c6a928499f568651f0fb2029df043192484544fdf7e99","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8718cca200123536ff9c6a928499f568651f0fb2029df043192484544fdf7e99","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8718cca200123536ff9c6a928499f568651f0fb2029df043192484544fdf7e99"}
{"level":"debug","ts":"2026-07-10T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b67e34b1a70d02e5ee56d407b442a890ee357bc12178d3c5bf8458ed3652d71d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:35:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:35:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b67e34b1a70d02e5ee56d407b442a890ee357bc12178d3c5bf8458ed3652d71d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b67e34b1a70d02e5ee56d407b442a890ee357bc12178d3c5bf8458ed3652d71d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b67e34b1a70d02e5ee56d407b442a890ee357bc12178d3c5bf8458ed3652d71d"}
{"level":"debug","ts":"2026-07-10T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b67e34b1a70d02e5ee56d407b442a890ee357bc12178d3c5bf8458ed3652d71d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b67e34b1a70d02e5ee56d407b442a890ee357bc12178d3c5bf8458ed3652d71d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b67e34b1a70d02e5ee56d407b442a890ee357bc12178d3c5bf8458ed3652d71d"}
{"level":"debug","ts":"2026-07-10T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b67e34b1a70d02e5ee56d407b442a890ee357bc12178d3c5bf8458ed3652d71d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:35:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:35:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b67e34b1a70d02e5ee56d407b442a890ee357bc12178d3c5bf8458ed3652d71d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b67e34b1a70d02e5ee56d407b442a890ee357bc12178d3c5bf8458ed3652d71d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:35:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:35:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b67e34b1a70d02e5ee56d407b442a890ee357bc12178d3c5bf8458ed3652d71d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13"}
{"level":"debug","ts":"2026-07-10T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:35:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:35:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b67e34b1a70d02e5ee56d407b442a890ee357bc12178d3c5bf8458ed3652d71d"}
{"level":"info","ts":"2026-07-10T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:35:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:35:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13"}
{"level":"info","ts":"2026-07-10T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13"}
{"level":"debug","ts":"2026-07-10T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a0c4e7db32efac6e8ab7829a97bb419d70ba52ed9b0a5369bdf8cadf16e9d5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:35:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:35:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13"}
{"level":"info","ts":"2026-07-10T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a0c4e7db32efac6e8ab7829a97bb419d70ba52ed9b0a5369bdf8cadf16e9d5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a0c4e7db32efac6e8ab7829a97bb419d70ba52ed9b0a5369bdf8cadf16e9d5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:35:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:35:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a0c4e7db32efac6e8ab7829a97bb419d70ba52ed9b0a5369bdf8cadf16e9d5b"}
{"level":"info","ts":"2026-07-10T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a0c4e7db32efac6e8ab7829a97bb419d70ba52ed9b0a5369bdf8cadf16e9d5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a0c4e7db32efac6e8ab7829a97bb419d70ba52ed9b0a5369bdf8cadf16e9d5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:35:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:35:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a0c4e7db32efac6e8ab7829a97bb419d70ba52ed9b0a5369bdf8cadf16e9d5b"}
{"level":"info","ts":"2026-07-10T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a0c4e7db32efac6e8ab7829a97bb419d70ba52ed9b0a5369bdf8cadf16e9d5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a0c4e7db32efac6e8ab7829a97bb419d70ba52ed9b0a5369bdf8cadf16e9d5b"}
{"level":"info","ts":"2026-07-10T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13"}
{"level":"debug","ts":"2026-07-10T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a0c4e7db32efac6e8ab7829a97bb419d70ba52ed9b0a5369bdf8cadf16e9d5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:35:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:35:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8a0c4e7db32efac6e8ab7829a97bb419d70ba52ed9b0a5369bdf8cadf16e9d5b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a0c4e7db32efac6e8ab7829a97bb419d70ba52ed9b0a5369bdf8cadf16e9d5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef913707cf8652d878813c745b2956f6e49427904b4b23f6deada0eab53097bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:35:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:35:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef913707cf8652d878813c745b2956f6e49427904b4b23f6deada0eab53097bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a0c4e7db32efac6e8ab7829a97bb419d70ba52ed9b0a5369bdf8cadf16e9d5b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef913707cf8652d878813c745b2956f6e49427904b4b23f6deada0eab53097bd"}
{"level":"debug","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef913707cf8652d878813c745b2956f6e49427904b4b23f6deada0eab53097bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:35:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:35:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef913707cf8652d878813c745b2956f6e49427904b4b23f6deada0eab53097bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef913707cf8652d878813c745b2956f6e49427904b4b23f6deada0eab53097bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef913707cf8652d878813c745b2956f6e49427904b4b23f6deada0eab53097bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:35:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:35:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef913707cf8652d878813c745b2956f6e49427904b4b23f6deada0eab53097bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a0c4e7db32efac6e8ab7829a97bb419d70ba52ed9b0a5369bdf8cadf16e9d5b"}
{"level":"error","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ef913707cf8652d878813c745b2956f6e49427904b4b23f6deada0eab53097bd","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ef913707cf8652d878813c745b2956f6e49427904b4b23f6deada0eab53097bd\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef913707cf8652d878813c745b2956f6e49427904b4b23f6deada0eab53097bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:35:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:35:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef913707cf8652d878813c745b2956f6e49427904b4b23f6deada0eab53097bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef913707cf8652d878813c745b2956f6e49427904b4b23f6deada0eab53097bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:35:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:35:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef913707cf8652d878813c745b2956f6e49427904b4b23f6deada0eab53097bd"}
{"level":"error","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ef913707cf8652d878813c745b2956f6e49427904b4b23f6deada0eab53097bd","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ef913707cf8652d878813c745b2956f6e49427904b4b23f6deada0eab53097bd\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef913707cf8652d878813c745b2956f6e49427904b4b23f6deada0eab53097bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef913707cf8652d878813c745b2956f6e49427904b4b23f6deada0eab53097bd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef913707cf8652d878813c745b2956f6e49427904b4b23f6deada0eab53097bd"}
{"level":"debug","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3bca17de12febca254d71d271a442cf75031cf31345eedb3f1d9406acc23190","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:35:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:35:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3bca17de12febca254d71d271a442cf75031cf31345eedb3f1d9406acc23190","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3bca17de12febca254d71d271a442cf75031cf31345eedb3f1d9406acc23190","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3bca17de12febca254d71d271a442cf75031cf31345eedb3f1d9406acc23190","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3bca17de12febca254d71d271a442cf75031cf31345eedb3f1d9406acc23190"}
{"level":"debug","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3bca17de12febca254d71d271a442cf75031cf31345eedb3f1d9406acc23190","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3bca17de12febca254d71d271a442cf75031cf31345eedb3f1d9406acc23190"}
{"level":"debug","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef913707cf8652d878813c745b2956f6e49427904b4b23f6deada0eab53097bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:35:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:35:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef913707cf8652d878813c745b2956f6e49427904b4b23f6deada0eab53097bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef913707cf8652d878813c745b2956f6e49427904b4b23f6deada0eab53097bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef913707cf8652d878813c745b2956f6e49427904b4b23f6deada0eab53097bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:35:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:35:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef913707cf8652d878813c745b2956f6e49427904b4b23f6deada0eab53097bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3bca17de12febca254d71d271a442cf75031cf31345eedb3f1d9406acc23190","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:35:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:35:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c3bca17de12febca254d71d271a442cf75031cf31345eedb3f1d9406acc23190"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef913707cf8652d878813c745b2956f6e49427904b4b23f6deada0eab53097bd"}
{"level":"info","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3bca17de12febca254d71d271a442cf75031cf31345eedb3f1d9406acc23190","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef913707cf8652d878813c745b2956f6e49427904b4b23f6deada0eab53097bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3bca17de12febca254d71d271a442cf75031cf31345eedb3f1d9406acc23190","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97db275f2b0b511a678a57d101a193017967e9ed1ea084ede5a26168e46b1c46","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:35:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:35:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef913707cf8652d878813c745b2956f6e49427904b4b23f6deada0eab53097bd"}
{"level":"info","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97db275f2b0b511a678a57d101a193017967e9ed1ea084ede5a26168e46b1c46","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef913707cf8652d878813c745b2956f6e49427904b4b23f6deada0eab53097bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:35:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:35:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef913707cf8652d878813c745b2956f6e49427904b4b23f6deada0eab53097bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef913707cf8652d878813c745b2956f6e49427904b4b23f6deada0eab53097bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97db275f2b0b511a678a57d101a193017967e9ed1ea084ede5a26168e46b1c46","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef913707cf8652d878813c745b2956f6e49427904b4b23f6deada0eab53097bd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3bca17de12febca254d71d271a442cf75031cf31345eedb3f1d9406acc23190"}
{"level":"debug","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97db275f2b0b511a678a57d101a193017967e9ed1ea084ede5a26168e46b1c46","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:35:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:35:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97db275f2b0b511a678a57d101a193017967e9ed1ea084ede5a26168e46b1c46","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97db275f2b0b511a678a57d101a193017967e9ed1ea084ede5a26168e46b1c46","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97db275f2b0b511a678a57d101a193017967e9ed1ea084ede5a26168e46b1c46"}
{"level":"debug","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97db275f2b0b511a678a57d101a193017967e9ed1ea084ede5a26168e46b1c46","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:35:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:35:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["97db275f2b0b511a678a57d101a193017967e9ed1ea084ede5a26168e46b1c46"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef913707cf8652d878813c745b2956f6e49427904b4b23f6deada0eab53097bd"}
{"level":"info","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97db275f2b0b511a678a57d101a193017967e9ed1ea084ede5a26168e46b1c46","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97db275f2b0b511a678a57d101a193017967e9ed1ea084ede5a26168e46b1c46","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:35:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:35:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97db275f2b0b511a678a57d101a193017967e9ed1ea084ede5a26168e46b1c46"}
{"level":"info","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97db275f2b0b511a678a57d101a193017967e9ed1ea084ede5a26168e46b1c46","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"322b62bcac7d60f239b25acc0bc2b6e0f3a521e7d68cd4f823a9a0942e1d92b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:35:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:35:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"322b62bcac7d60f239b25acc0bc2b6e0f3a521e7d68cd4f823a9a0942e1d92b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97db275f2b0b511a678a57d101a193017967e9ed1ea084ede5a26168e46b1c46","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"322b62bcac7d60f239b25acc0bc2b6e0f3a521e7d68cd4f823a9a0942e1d92b7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97db275f2b0b511a678a57d101a193017967e9ed1ea084ede5a26168e46b1c46"}
{"level":"debug","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"322b62bcac7d60f239b25acc0bc2b6e0f3a521e7d68cd4f823a9a0942e1d92b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:35:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:35:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"322b62bcac7d60f239b25acc0bc2b6e0f3a521e7d68cd4f823a9a0942e1d92b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97db275f2b0b511a678a57d101a193017967e9ed1ea084ede5a26168e46b1c46","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:35:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:35:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["97db275f2b0b511a678a57d101a193017967e9ed1ea084ede5a26168e46b1c46"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/322b62bcac7d60f239b25acc0bc2b6e0f3a521e7d68cd4f823a9a0942e1d92b7"}
{"level":"info","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97db275f2b0b511a678a57d101a193017967e9ed1ea084ede5a26168e46b1c46","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"322b62bcac7d60f239b25acc0bc2b6e0f3a521e7d68cd4f823a9a0942e1d92b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:35:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:35:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["322b62bcac7d60f239b25acc0bc2b6e0f3a521e7d68cd4f823a9a0942e1d92b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97db275f2b0b511a678a57d101a193017967e9ed1ea084ede5a26168e46b1c46"}
{"level":"info","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"322b62bcac7d60f239b25acc0bc2b6e0f3a521e7d68cd4f823a9a0942e1d92b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97db275f2b0b511a678a57d101a193017967e9ed1ea084ede5a26168e46b1c46","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"322b62bcac7d60f239b25acc0bc2b6e0f3a521e7d68cd4f823a9a0942e1d92b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"322b62bcac7d60f239b25acc0bc2b6e0f3a521e7d68cd4f823a9a0942e1d92b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:35:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:35:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/322b62bcac7d60f239b25acc0bc2b6e0f3a521e7d68cd4f823a9a0942e1d92b7"}
{"level":"info","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"322b62bcac7d60f239b25acc0bc2b6e0f3a521e7d68cd4f823a9a0942e1d92b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"322b62bcac7d60f239b25acc0bc2b6e0f3a521e7d68cd4f823a9a0942e1d92b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"322b62bcac7d60f239b25acc0bc2b6e0f3a521e7d68cd4f823a9a0942e1d92b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:35:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:35:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["322b62bcac7d60f239b25acc0bc2b6e0f3a521e7d68cd4f823a9a0942e1d92b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"322b62bcac7d60f239b25acc0bc2b6e0f3a521e7d68cd4f823a9a0942e1d92b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"322b62bcac7d60f239b25acc0bc2b6e0f3a521e7d68cd4f823a9a0942e1d92b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:35:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:35:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["322b62bcac7d60f239b25acc0bc2b6e0f3a521e7d68cd4f823a9a0942e1d92b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97db275f2b0b511a678a57d101a193017967e9ed1ea084ede5a26168e46b1c46"}
{"level":"error","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"322b62bcac7d60f239b25acc0bc2b6e0f3a521e7d68cd4f823a9a0942e1d92b7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"322b62bcac7d60f239b25acc0bc2b6e0f3a521e7d68cd4f823a9a0942e1d92b7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"322b62bcac7d60f239b25acc0bc2b6e0f3a521e7d68cd4f823a9a0942e1d92b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:35:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:35:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/322b62bcac7d60f239b25acc0bc2b6e0f3a521e7d68cd4f823a9a0942e1d92b7"}
{"level":"info","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"322b62bcac7d60f239b25acc0bc2b6e0f3a521e7d68cd4f823a9a0942e1d92b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"322b62bcac7d60f239b25acc0bc2b6e0f3a521e7d68cd4f823a9a0942e1d92b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"322b62bcac7d60f239b25acc0bc2b6e0f3a521e7d68cd4f823a9a0942e1d92b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:35:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:35:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["322b62bcac7d60f239b25acc0bc2b6e0f3a521e7d68cd4f823a9a0942e1d92b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"322b62bcac7d60f239b25acc0bc2b6e0f3a521e7d68cd4f823a9a0942e1d92b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"322b62bcac7d60f239b25acc0bc2b6e0f3a521e7d68cd4f823a9a0942e1d92b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"322b62bcac7d60f239b25acc0bc2b6e0f3a521e7d68cd4f823a9a0942e1d92b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:35:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:35:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/322b62bcac7d60f239b25acc0bc2b6e0f3a521e7d68cd4f823a9a0942e1d92b7"}
{"level":"info","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"322b62bcac7d60f239b25acc0bc2b6e0f3a521e7d68cd4f823a9a0942e1d92b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"322b62bcac7d60f239b25acc0bc2b6e0f3a521e7d68cd4f823a9a0942e1d92b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:35:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:35:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/322b62bcac7d60f239b25acc0bc2b6e0f3a521e7d68cd4f823a9a0942e1d92b7"}
{"level":"error","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"322b62bcac7d60f239b25acc0bc2b6e0f3a521e7d68cd4f823a9a0942e1d92b7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"322b62bcac7d60f239b25acc0bc2b6e0f3a521e7d68cd4f823a9a0942e1d92b7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"322b62bcac7d60f239b25acc0bc2b6e0f3a521e7d68cd4f823a9a0942e1d92b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"322b62bcac7d60f239b25acc0bc2b6e0f3a521e7d68cd4f823a9a0942e1d92b7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/322b62bcac7d60f239b25acc0bc2b6e0f3a521e7d68cd4f823a9a0942e1d92b7"}
{"level":"debug","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"322b62bcac7d60f239b25acc0bc2b6e0f3a521e7d68cd4f823a9a0942e1d92b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:35:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:35:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["322b62bcac7d60f239b25acc0bc2b6e0f3a521e7d68cd4f823a9a0942e1d92b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"322b62bcac7d60f239b25acc0bc2b6e0f3a521e7d68cd4f823a9a0942e1d92b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"322b62bcac7d60f239b25acc0bc2b6e0f3a521e7d68cd4f823a9a0942e1d92b7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/322b62bcac7d60f239b25acc0bc2b6e0f3a521e7d68cd4f823a9a0942e1d92b7"}
{"level":"debug","ts":"2026-07-10T16:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c3b0275187ba1375b7934fab861395b2b4769be59dc5e596787a213d43b574b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:35:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:35:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c3b0275187ba1375b7934fab861395b2b4769be59dc5e596787a213d43b574b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c3b0275187ba1375b7934fab861395b2b4769be59dc5e596787a213d43b574b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c3b0275187ba1375b7934fab861395b2b4769be59dc5e596787a213d43b574b"}
{"level":"debug","ts":"2026-07-10T16:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c3b0275187ba1375b7934fab861395b2b4769be59dc5e596787a213d43b574b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c3b0275187ba1375b7934fab861395b2b4769be59dc5e596787a213d43b574b"}
{"level":"debug","ts":"2026-07-10T16:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c3b0275187ba1375b7934fab861395b2b4769be59dc5e596787a213d43b574b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:35:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:35:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c3b0275187ba1375b7934fab861395b2b4769be59dc5e596787a213d43b574b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c3b0275187ba1375b7934fab861395b2b4769be59dc5e596787a213d43b574b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c3b0275187ba1375b7934fab861395b2b4769be59dc5e596787a213d43b574b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:35:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:35:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c3b0275187ba1375b7934fab861395b2b4769be59dc5e596787a213d43b574b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c3b0275187ba1375b7934fab861395b2b4769be59dc5e596787a213d43b574b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c3b0275187ba1375b7934fab861395b2b4769be59dc5e596787a213d43b574b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c3b0275187ba1375b7934fab861395b2b4769be59dc5e596787a213d43b574b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c3b0275187ba1375b7934fab861395b2b4769be59dc5e596787a213d43b574b"}
{"level":"info","ts":"2026-07-10T16:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c3b0275187ba1375b7934fab861395b2b4769be59dc5e596787a213d43b574b"}
{"level":"debug","ts":"2026-07-10T16:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c3b0275187ba1375b7934fab861395b2b4769be59dc5e596787a213d43b574b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:35:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:35:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c3b0275187ba1375b7934fab861395b2b4769be59dc5e596787a213d43b574b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c3b0275187ba1375b7934fab861395b2b4769be59dc5e596787a213d43b574b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c3b0275187ba1375b7934fab861395b2b4769be59dc5e596787a213d43b574b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:35:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:35:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c3b0275187ba1375b7934fab861395b2b4769be59dc5e596787a213d43b574b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c3b0275187ba1375b7934fab861395b2b4769be59dc5e596787a213d43b574b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c3b0275187ba1375b7934fab861395b2b4769be59dc5e596787a213d43b574b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c3b0275187ba1375b7934fab861395b2b4769be59dc5e596787a213d43b574b"}
{"level":"debug","ts":"2026-07-10T16:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c3b0275187ba1375b7934fab861395b2b4769be59dc5e596787a213d43b574b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c3b0275187ba1375b7934fab861395b2b4769be59dc5e596787a213d43b574b"}
{"level":"debug","ts":"2026-07-10T16:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c3b0275187ba1375b7934fab861395b2b4769be59dc5e596787a213d43b574b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:35:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:35:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c3b0275187ba1375b7934fab861395b2b4769be59dc5e596787a213d43b574b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c3b0275187ba1375b7934fab861395b2b4769be59dc5e596787a213d43b574b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c3b0275187ba1375b7934fab861395b2b4769be59dc5e596787a213d43b574b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c3b0275187ba1375b7934fab861395b2b4769be59dc5e596787a213d43b574b"}
{"level":"debug","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c334e0860c9dafe612b840c5bb1161425e10424bd1c37f7860f29cefaba32e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c334e0860c9dafe612b840c5bb1161425e10424bd1c37f7860f29cefaba32e0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c334e0860c9dafe612b840c5bb1161425e10424bd1c37f7860f29cefaba32e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c334e0860c9dafe612b840c5bb1161425e10424bd1c37f7860f29cefaba32e0"}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c334e0860c9dafe612b840c5bb1161425e10424bd1c37f7860f29cefaba32e0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c334e0860c9dafe612b840c5bb1161425e10424bd1c37f7860f29cefaba32e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0c334e0860c9dafe612b840c5bb1161425e10424bd1c37f7860f29cefaba32e0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0c334e0860c9dafe612b840c5bb1161425e10424bd1c37f7860f29cefaba32e0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c334e0860c9dafe612b840c5bb1161425e10424bd1c37f7860f29cefaba32e0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c334e0860c9dafe612b840c5bb1161425e10424bd1c37f7860f29cefaba32e0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c334e0860c9dafe612b840c5bb1161425e10424bd1c37f7860f29cefaba32e0"}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c334e0860c9dafe612b840c5bb1161425e10424bd1c37f7860f29cefaba32e0"}
{"level":"debug","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3ec29e5502cf0b51a77c55ae319bdffd4b9ca89604704be78329ed1fb17c580","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3ec29e5502cf0b51a77c55ae319bdffd4b9ca89604704be78329ed1fb17c580","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3ec29e5502cf0b51a77c55ae319bdffd4b9ca89604704be78329ed1fb17c580","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3ec29e5502cf0b51a77c55ae319bdffd4b9ca89604704be78329ed1fb17c580","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3ec29e5502cf0b51a77c55ae319bdffd4b9ca89604704be78329ed1fb17c580"}
{"level":"debug","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c334e0860c9dafe612b840c5bb1161425e10424bd1c37f7860f29cefaba32e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0c334e0860c9dafe612b840c5bb1161425e10424bd1c37f7860f29cefaba32e0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c334e0860c9dafe612b840c5bb1161425e10424bd1c37f7860f29cefaba32e0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3ec29e5502cf0b51a77c55ae319bdffd4b9ca89604704be78329ed1fb17c580","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c334e0860c9dafe612b840c5bb1161425e10424bd1c37f7860f29cefaba32e0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3ec29e5502cf0b51a77c55ae319bdffd4b9ca89604704be78329ed1fb17c580"}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c334e0860c9dafe612b840c5bb1161425e10424bd1c37f7860f29cefaba32e0"}
{"level":"debug","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3ec29e5502cf0b51a77c55ae319bdffd4b9ca89604704be78329ed1fb17c580","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c3ec29e5502cf0b51a77c55ae319bdffd4b9ca89604704be78329ed1fb17c580"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3ec29e5502cf0b51a77c55ae319bdffd4b9ca89604704be78329ed1fb17c580","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3ec29e5502cf0b51a77c55ae319bdffd4b9ca89604704be78329ed1fb17c580","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3ec29e5502cf0b51a77c55ae319bdffd4b9ca89604704be78329ed1fb17c580","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6294409d08059efda77d6650765745a12e4a9ebbf11dc615944239b094847d33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3ec29e5502cf0b51a77c55ae319bdffd4b9ca89604704be78329ed1fb17c580"}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6294409d08059efda77d6650765745a12e4a9ebbf11dc615944239b094847d33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3ec29e5502cf0b51a77c55ae319bdffd4b9ca89604704be78329ed1fb17c580","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c3ec29e5502cf0b51a77c55ae319bdffd4b9ca89604704be78329ed1fb17c580"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3ec29e5502cf0b51a77c55ae319bdffd4b9ca89604704be78329ed1fb17c580","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6294409d08059efda77d6650765745a12e4a9ebbf11dc615944239b094847d33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6294409d08059efda77d6650765745a12e4a9ebbf11dc615944239b094847d33"}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6294409d08059efda77d6650765745a12e4a9ebbf11dc615944239b094847d33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3ec29e5502cf0b51a77c55ae319bdffd4b9ca89604704be78329ed1fb17c580","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3ec29e5502cf0b51a77c55ae319bdffd4b9ca89604704be78329ed1fb17c580","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6294409d08059efda77d6650765745a12e4a9ebbf11dc615944239b094847d33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6294409d08059efda77d6650765745a12e4a9ebbf11dc615944239b094847d33"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3ec29e5502cf0b51a77c55ae319bdffd4b9ca89604704be78329ed1fb17c580"}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6294409d08059efda77d6650765745a12e4a9ebbf11dc615944239b094847d33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3ec29e5502cf0b51a77c55ae319bdffd4b9ca89604704be78329ed1fb17c580","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c3ec29e5502cf0b51a77c55ae319bdffd4b9ca89604704be78329ed1fb17c580"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6294409d08059efda77d6650765745a12e4a9ebbf11dc615944239b094847d33"}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3ec29e5502cf0b51a77c55ae319bdffd4b9ca89604704be78329ed1fb17c580","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6294409d08059efda77d6650765745a12e4a9ebbf11dc615944239b094847d33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3ec29e5502cf0b51a77c55ae319bdffd4b9ca89604704be78329ed1fb17c580","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3ec29e5502cf0b51a77c55ae319bdffd4b9ca89604704be78329ed1fb17c580","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3ec29e5502cf0b51a77c55ae319bdffd4b9ca89604704be78329ed1fb17c580","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e516db5c23ed85154435a02e7e13f25eddace5aafffc877b0b36f6bfaeb4881","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3ec29e5502cf0b51a77c55ae319bdffd4b9ca89604704be78329ed1fb17c580"}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e516db5c23ed85154435a02e7e13f25eddace5aafffc877b0b36f6bfaeb4881","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3ec29e5502cf0b51a77c55ae319bdffd4b9ca89604704be78329ed1fb17c580","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c3ec29e5502cf0b51a77c55ae319bdffd4b9ca89604704be78329ed1fb17c580"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6294409d08059efda77d6650765745a12e4a9ebbf11dc615944239b094847d33"}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3ec29e5502cf0b51a77c55ae319bdffd4b9ca89604704be78329ed1fb17c580","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e516db5c23ed85154435a02e7e13f25eddace5aafffc877b0b36f6bfaeb4881","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e516db5c23ed85154435a02e7e13f25eddace5aafffc877b0b36f6bfaeb4881","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3ec29e5502cf0b51a77c55ae319bdffd4b9ca89604704be78329ed1fb17c580","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e516db5c23ed85154435a02e7e13f25eddace5aafffc877b0b36f6bfaeb4881","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e516db5c23ed85154435a02e7e13f25eddace5aafffc877b0b36f6bfaeb4881"}
{"level":"debug","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e516db5c23ed85154435a02e7e13f25eddace5aafffc877b0b36f6bfaeb4881","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e516db5c23ed85154435a02e7e13f25eddace5aafffc877b0b36f6bfaeb4881"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e516db5c23ed85154435a02e7e13f25eddace5aafffc877b0b36f6bfaeb4881","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e516db5c23ed85154435a02e7e13f25eddace5aafffc877b0b36f6bfaeb4881","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3ec29e5502cf0b51a77c55ae319bdffd4b9ca89604704be78329ed1fb17c580"}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e516db5c23ed85154435a02e7e13f25eddace5aafffc877b0b36f6bfaeb4881"}
{"level":"debug","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"760233e7f89996db8d3b5f13d4c76b2d18872ff03c5ab8c81d14787d19a778d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"760233e7f89996db8d3b5f13d4c76b2d18872ff03c5ab8c81d14787d19a778d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"760233e7f89996db8d3b5f13d4c76b2d18872ff03c5ab8c81d14787d19a778d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"760233e7f89996db8d3b5f13d4c76b2d18872ff03c5ab8c81d14787d19a778d8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/760233e7f89996db8d3b5f13d4c76b2d18872ff03c5ab8c81d14787d19a778d8"}
{"level":"debug","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"760233e7f89996db8d3b5f13d4c76b2d18872ff03c5ab8c81d14787d19a778d8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/760233e7f89996db8d3b5f13d4c76b2d18872ff03c5ab8c81d14787d19a778d8"}
{"level":"debug","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"760233e7f89996db8d3b5f13d4c76b2d18872ff03c5ab8c81d14787d19a778d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["760233e7f89996db8d3b5f13d4c76b2d18872ff03c5ab8c81d14787d19a778d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"760233e7f89996db8d3b5f13d4c76b2d18872ff03c5ab8c81d14787d19a778d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"760233e7f89996db8d3b5f13d4c76b2d18872ff03c5ab8c81d14787d19a778d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"760233e7f89996db8d3b5f13d4c76b2d18872ff03c5ab8c81d14787d19a778d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d982ef5207c517b564d619db07c813e42cb0590f1d95878c47e0b1f10f2ee72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/760233e7f89996db8d3b5f13d4c76b2d18872ff03c5ab8c81d14787d19a778d8"}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d982ef5207c517b564d619db07c813e42cb0590f1d95878c47e0b1f10f2ee72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"760233e7f89996db8d3b5f13d4c76b2d18872ff03c5ab8c81d14787d19a778d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["760233e7f89996db8d3b5f13d4c76b2d18872ff03c5ab8c81d14787d19a778d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"760233e7f89996db8d3b5f13d4c76b2d18872ff03c5ab8c81d14787d19a778d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e39934c9ec24489795a53694d0c4e390d8511304a4f93ddb7a78a63792359cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d982ef5207c517b564d619db07c813e42cb0590f1d95878c47e0b1f10f2ee72"}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e39934c9ec24489795a53694d0c4e390d8511304a4f93ddb7a78a63792359cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d982ef5207c517b564d619db07c813e42cb0590f1d95878c47e0b1f10f2ee72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d982ef5207c517b564d619db07c813e42cb0590f1d95878c47e0b1f10f2ee72"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e39934c9ec24489795a53694d0c4e390d8511304a4f93ddb7a78a63792359cc"}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d982ef5207c517b564d619db07c813e42cb0590f1d95878c47e0b1f10f2ee72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"760233e7f89996db8d3b5f13d4c76b2d18872ff03c5ab8c81d14787d19a778d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"760233e7f89996db8d3b5f13d4c76b2d18872ff03c5ab8c81d14787d19a778d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e39934c9ec24489795a53694d0c4e390d8511304a4f93ddb7a78a63792359cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e39934c9ec24489795a53694d0c4e390d8511304a4f93ddb7a78a63792359cc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/760233e7f89996db8d3b5f13d4c76b2d18872ff03c5ab8c81d14787d19a778d8"}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e39934c9ec24489795a53694d0c4e390d8511304a4f93ddb7a78a63792359cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d982ef5207c517b564d619db07c813e42cb0590f1d95878c47e0b1f10f2ee72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d982ef5207c517b564d619db07c813e42cb0590f1d95878c47e0b1f10f2ee72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"760233e7f89996db8d3b5f13d4c76b2d18872ff03c5ab8c81d14787d19a778d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["760233e7f89996db8d3b5f13d4c76b2d18872ff03c5ab8c81d14787d19a778d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d982ef5207c517b564d619db07c813e42cb0590f1d95878c47e0b1f10f2ee72"}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"760233e7f89996db8d3b5f13d4c76b2d18872ff03c5ab8c81d14787d19a778d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e39934c9ec24489795a53694d0c4e390d8511304a4f93ddb7a78a63792359cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e39934c9ec24489795a53694d0c4e390d8511304a4f93ddb7a78a63792359cc"}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e39934c9ec24489795a53694d0c4e390d8511304a4f93ddb7a78a63792359cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d982ef5207c517b564d619db07c813e42cb0590f1d95878c47e0b1f10f2ee72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d982ef5207c517b564d619db07c813e42cb0590f1d95878c47e0b1f10f2ee72"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d982ef5207c517b564d619db07c813e42cb0590f1d95878c47e0b1f10f2ee72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"760233e7f89996db8d3b5f13d4c76b2d18872ff03c5ab8c81d14787d19a778d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/760233e7f89996db8d3b5f13d4c76b2d18872ff03c5ab8c81d14787d19a778d8"}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"760233e7f89996db8d3b5f13d4c76b2d18872ff03c5ab8c81d14787d19a778d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e39934c9ec24489795a53694d0c4e390d8511304a4f93ddb7a78a63792359cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e39934c9ec24489795a53694d0c4e390d8511304a4f93ddb7a78a63792359cc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e39934c9ec24489795a53694d0c4e390d8511304a4f93ddb7a78a63792359cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d982ef5207c517b564d619db07c813e42cb0590f1d95878c47e0b1f10f2ee72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d982ef5207c517b564d619db07c813e42cb0590f1d95878c47e0b1f10f2ee72"}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d982ef5207c517b564d619db07c813e42cb0590f1d95878c47e0b1f10f2ee72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"760233e7f89996db8d3b5f13d4c76b2d18872ff03c5ab8c81d14787d19a778d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["760233e7f89996db8d3b5f13d4c76b2d18872ff03c5ab8c81d14787d19a778d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e39934c9ec24489795a53694d0c4e390d8511304a4f93ddb7a78a63792359cc"}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"760233e7f89996db8d3b5f13d4c76b2d18872ff03c5ab8c81d14787d19a778d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e39934c9ec24489795a53694d0c4e390d8511304a4f93ddb7a78a63792359cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d982ef5207c517b564d619db07c813e42cb0590f1d95878c47e0b1f10f2ee72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d982ef5207c517b564d619db07c813e42cb0590f1d95878c47e0b1f10f2ee72"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d982ef5207c517b564d619db07c813e42cb0590f1d95878c47e0b1f10f2ee72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"760233e7f89996db8d3b5f13d4c76b2d18872ff03c5ab8c81d14787d19a778d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:35:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:35:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/760233e7f89996db8d3b5f13d4c76b2d18872ff03c5ab8c81d14787d19a778d8"}
{"level":"info","ts":"2026-07-10T16:35:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"760233e7f89996db8d3b5f13d4c76b2d18872ff03c5ab8c81d14787d19a778d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d982ef5207c517b564d619db07c813e42cb0590f1d95878c47e0b1f10f2ee72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:35:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:35:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d982ef5207c517b564d619db07c813e42cb0590f1d95878c47e0b1f10f2ee72"}
{"level":"info","ts":"2026-07-10T16:35:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d982ef5207c517b564d619db07c813e42cb0590f1d95878c47e0b1f10f2ee72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"760233e7f89996db8d3b5f13d4c76b2d18872ff03c5ab8c81d14787d19a778d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d982ef5207c517b564d619db07c813e42cb0590f1d95878c47e0b1f10f2ee72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:35:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:35:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d982ef5207c517b564d619db07c813e42cb0590f1d95878c47e0b1f10f2ee72"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d982ef5207c517b564d619db07c813e42cb0590f1d95878c47e0b1f10f2ee72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"760233e7f89996db8d3b5f13d4c76b2d18872ff03c5ab8c81d14787d19a778d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d982ef5207c517b564d619db07c813e42cb0590f1d95878c47e0b1f10f2ee72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:35:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:35:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d982ef5207c517b564d619db07c813e42cb0590f1d95878c47e0b1f10f2ee72"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/760233e7f89996db8d3b5f13d4c76b2d18872ff03c5ab8c81d14787d19a778d8"}
{"level":"error","ts":"2026-07-10T16:35:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5d982ef5207c517b564d619db07c813e42cb0590f1d95878c47e0b1f10f2ee72","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5d982ef5207c517b564d619db07c813e42cb0590f1d95878c47e0b1f10f2ee72\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T16:35:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d982ef5207c517b564d619db07c813e42cb0590f1d95878c47e0b1f10f2ee72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:35:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:35:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d982ef5207c517b564d619db07c813e42cb0590f1d95878c47e0b1f10f2ee72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"760233e7f89996db8d3b5f13d4c76b2d18872ff03c5ab8c81d14787d19a778d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:35:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:35:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["760233e7f89996db8d3b5f13d4c76b2d18872ff03c5ab8c81d14787d19a778d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d982ef5207c517b564d619db07c813e42cb0590f1d95878c47e0b1f10f2ee72"}
{"level":"info","ts":"2026-07-10T16:35:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"760233e7f89996db8d3b5f13d4c76b2d18872ff03c5ab8c81d14787d19a778d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d982ef5207c517b564d619db07c813e42cb0590f1d95878c47e0b1f10f2ee72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"760233e7f89996db8d3b5f13d4c76b2d18872ff03c5ab8c81d14787d19a778d8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:35:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d982ef5207c517b564d619db07c813e42cb0590f1d95878c47e0b1f10f2ee72"}
{"level":"debug","ts":"2026-07-10T16:35:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d982ef5207c517b564d619db07c813e42cb0590f1d95878c47e0b1f10f2ee72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:35:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:35:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d982ef5207c517b564d619db07c813e42cb0590f1d95878c47e0b1f10f2ee72"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d982ef5207c517b564d619db07c813e42cb0590f1d95878c47e0b1f10f2ee72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d982ef5207c517b564d619db07c813e42cb0590f1d95878c47e0b1f10f2ee72","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:35:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/760233e7f89996db8d3b5f13d4c76b2d18872ff03c5ab8c81d14787d19a778d8"}
{"level":"info","ts":"2026-07-10T16:35:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d982ef5207c517b564d619db07c813e42cb0590f1d95878c47e0b1f10f2ee72"}
{"level":"debug","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e39934c9ec24489795a53694d0c4e390d8511304a4f93ddb7a78a63792359cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f82f20d238e2ca215eff3d03db3f776b2de4f33dd8ec5567b7ccd28186e798a2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e39934c9ec24489795a53694d0c4e390d8511304a4f93ddb7a78a63792359cc"}
{"level":"info","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f82f20d238e2ca215eff3d03db3f776b2de4f33dd8ec5567b7ccd28186e798a2"}
{"level":"debug","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7721743ad43c20bb21e8bfc1f5884927cdb097bfbb99562ebf2df3758f664b96","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7721743ad43c20bb21e8bfc1f5884927cdb097bfbb99562ebf2df3758f664b96"}
{"level":"debug","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b85944d46cb0fc25a732050670e3c03c485e9f3366f7b98af2162775b3fd965","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b85944d46cb0fc25a732050670e3c03c485e9f3366f7b98af2162775b3fd965"}
{"level":"debug","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:36:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:36:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13"}
{"level":"debug","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13"}
{"level":"debug","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:36:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:36:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:36:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:36:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e838baba826e016bf3e907ef3289699aedfd7707968047696d2bc8d7dffeb8b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13"}
{"level":"debug","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:36:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:36:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e838baba826e016bf3e907ef3289699aedfd7707968047696d2bc8d7dffeb8b7"}
{"level":"info","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:36:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:36:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13"}
{"level":"info","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13"}
{"level":"debug","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13"}
{"level":"debug","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:36:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:36:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:36:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:36:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13"}
{"level":"debug","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a5c276c68701b91aa220d9445d305e58706ac1451887ccb2873ccfb5b643af6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13"}
{"level":"info","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a5c276c68701b91aa220d9445d305e58706ac1451887ccb2873ccfb5b643af6"}
{"level":"debug","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:36:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:36:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:36:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:36:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13"}
{"level":"debug","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3bca17de12febca254d71d271a442cf75031cf31345eedb3f1d9406acc23190","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13"}
{"level":"info","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3bca17de12febca254d71d271a442cf75031cf31345eedb3f1d9406acc23190"}
{"level":"debug","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:36:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:36:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:36:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:36:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13"}
{"level":"debug","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef913707cf8652d878813c745b2956f6e49427904b4b23f6deada0eab53097bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13"}
{"level":"debug","ts":"2026-07-10T16:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"760233e7f89996db8d3b5f13d4c76b2d18872ff03c5ab8c81d14787d19a778d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3ec29e5502cf0b51a77c55ae319bdffd4b9ca89604704be78329ed1fb17c580","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef913707cf8652d878813c745b2956f6e49427904b4b23f6deada0eab53097bd"}
{"level":"debug","ts":"2026-07-10T16:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:36:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:36:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/760233e7f89996db8d3b5f13d4c76b2d18872ff03c5ab8c81d14787d19a778d8"}
{"level":"info","ts":"2026-07-10T16:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d982ef5207c517b564d619db07c813e42cb0590f1d95878c47e0b1f10f2ee72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3ec29e5502cf0b51a77c55ae319bdffd4b9ca89604704be78329ed1fb17c580"}
{"level":"debug","ts":"2026-07-10T16:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9820940ea561ac7233f172e32ee5331166ec7b68699ae5eb20ae3735d956d6c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d982ef5207c517b564d619db07c813e42cb0590f1d95878c47e0b1f10f2ee72"}
{"level":"debug","ts":"2026-07-10T16:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"322b62bcac7d60f239b25acc0bc2b6e0f3a521e7d68cd4f823a9a0942e1d92b7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13"}
{"level":"debug","ts":"2026-07-10T16:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c334e0860c9dafe612b840c5bb1161425e10424bd1c37f7860f29cefaba32e0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9820940ea561ac7233f172e32ee5331166ec7b68699ae5eb20ae3735d956d6c"}
{"level":"debug","ts":"2026-07-10T16:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c3b0275187ba1375b7934fab861395b2b4769be59dc5e596787a213d43b574b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/322b62bcac7d60f239b25acc0bc2b6e0f3a521e7d68cd4f823a9a0942e1d92b7"}
{"level":"debug","ts":"2026-07-10T16:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e516db5c23ed85154435a02e7e13f25eddace5aafffc877b0b36f6bfaeb4881","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c334e0860c9dafe612b840c5bb1161425e10424bd1c37f7860f29cefaba32e0"}
{"level":"debug","ts":"2026-07-10T16:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8718cca200123536ff9c6a928499f568651f0fb2029df043192484544fdf7e99","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c3b0275187ba1375b7934fab861395b2b4769be59dc5e596787a213d43b574b"}
{"level":"debug","ts":"2026-07-10T16:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97db275f2b0b511a678a57d101a193017967e9ed1ea084ede5a26168e46b1c46","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e516db5c23ed85154435a02e7e13f25eddace5aafffc877b0b36f6bfaeb4881"}
{"level":"debug","ts":"2026-07-10T16:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b67e34b1a70d02e5ee56d407b442a890ee357bc12178d3c5bf8458ed3652d71d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8718cca200123536ff9c6a928499f568651f0fb2029df043192484544fdf7e99"}
{"level":"debug","ts":"2026-07-10T16:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e49051792b57df5810fde9b861812a25231a47623393de5f45505cc93d8fbc54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a0c4e7db32efac6e8ab7829a97bb419d70ba52ed9b0a5369bdf8cadf16e9d5b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97db275f2b0b511a678a57d101a193017967e9ed1ea084ede5a26168e46b1c46"}
{"level":"info","ts":"2026-07-10T16:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b67e34b1a70d02e5ee56d407b442a890ee357bc12178d3c5bf8458ed3652d71d"}
{"level":"debug","ts":"2026-07-10T16:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6294409d08059efda77d6650765745a12e4a9ebbf11dc615944239b094847d33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93c555b1065512c5684811d38f24e050e04f087a711f9950c3b4d132b51540f2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e49051792b57df5810fde9b861812a25231a47623393de5f45505cc93d8fbc54"}
{"level":"info","ts":"2026-07-10T16:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a0c4e7db32efac6e8ab7829a97bb419d70ba52ed9b0a5369bdf8cadf16e9d5b"}
{"level":"info","ts":"2026-07-10T16:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6294409d08059efda77d6650765745a12e4a9ebbf11dc615944239b094847d33"}
{"level":"info","ts":"2026-07-10T16:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93c555b1065512c5684811d38f24e050e04f087a711f9950c3b4d132b51540f2"}
{"level":"info","ts":"2026-07-10T16:36:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1e7dc66c-5f1c-4ece-bf8f-9b9af50b40e8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:60316","PortSpecifier":{"PortValue":60316}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1e7dc66c-5f1c-4ece-bf8f-9b9af50b40e8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-c32d0d.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T16:36:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1e7dc66c-5f1c-4ece-bf8f-9b9af50b40e8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:60316","PortSpecifier":{"PortValue":60316}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783701379,"nanos":601314456},"http":{"id":"1e7dc66c-5f1c-4ece-bf8f-9b9af50b40e8","method":"POST","headers":{":authority":"e2e-shared-a-c32d0d.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T16:36:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1e7dc66c-5f1c-4ece-bf8f-9b9af50b40e8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T16:36:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1e7dc66c-5f1c-4ece-bf8f-9b9af50b40e8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7a40ffd7-a182-4c3c-800e-1500d8c71f55","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=140fc507-4b2c-41b0-acee-fa2979abe5ce"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9a27fba088"]}}
{"level":"debug","ts":"2026-07-10T16:36:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1e7dc66c-5f1c-4ece-bf8f-9b9af50b40e8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9a27fba088"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=140fc507-4b2c-41b0-acee-fa2979abe5ce"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7a40ffd7-a182-4c3c-800e-1500d8c71f55","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e49051792b57df5810fde9b861812a25231a47623393de5f45505cc93d8fbc54"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c32d0d.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T16:36:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1e7dc66c-5f1c-4ece-bf8f-9b9af50b40e8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:36:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1e7dc66c-5f1c-4ece-bf8f-9b9af50b40e8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:36:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1e7dc66c-5f1c-4ece-bf8f-9b9af50b40e8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c32d0d/rate-test-model-c32d0d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:36:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1e7dc66c-5f1c-4ece-bf8f-9b9af50b40e8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T16:36:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1e7dc66c-5f1c-4ece-bf8f-9b9af50b40e8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T16:36:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1e7dc66c-5f1c-4ece-bf8f-9b9af50b40e8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-10T16:36:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1e7dc66c-5f1c-4ece-bf8f-9b9af50b40e8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T16:36:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1e7dc66c-5f1c-4ece-bf8f-9b9af50b40e8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T16:36:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b0d70d85-fbb7-4af6-8c7c-874d0496c24b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:50956","PortSpecifier":{"PortValue":50956}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b0d70d85-fbb7-4af6-8c7c-874d0496c24b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-466b1a.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T16:36:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b0d70d85-fbb7-4af6-8c7c-874d0496c24b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:50956","PortSpecifier":{"PortValue":50956}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783701379,"nanos":647331282},"http":{"id":"b0d70d85-fbb7-4af6-8c7c-874d0496c24b","method":"POST","headers":{":authority":"e2e-shared-b-466b1a.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T16:36:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b0d70d85-fbb7-4af6-8c7c-874d0496c24b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T16:36:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b0d70d85-fbb7-4af6-8c7c-874d0496c24b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7a40ffd7-a182-4c3c-800e-1500d8c71f55","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=140fc507-4b2c-41b0-acee-fa2979abe5ce"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9a27fba088"]}}
{"level":"debug","ts":"2026-07-10T16:36:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b0d70d85-fbb7-4af6-8c7c-874d0496c24b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9a27fba088"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=140fc507-4b2c-41b0-acee-fa2979abe5ce"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7a40ffd7-a182-4c3c-800e-1500d8c71f55","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e838baba826e016bf3e907ef3289699aedfd7707968047696d2bc8d7dffeb8b7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-466b1a.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T16:36:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b0d70d85-fbb7-4af6-8c7c-874d0496c24b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:36:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b0d70d85-fbb7-4af6-8c7c-874d0496c24b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:36:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b0d70d85-fbb7-4af6-8c7c-874d0496c24b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-466b1a/rate-test-model-466b1a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:36:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b0d70d85-fbb7-4af6-8c7c-874d0496c24b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T16:36:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b0d70d85-fbb7-4af6-8c7c-874d0496c24b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T16:36:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b0d70d85-fbb7-4af6-8c7c-874d0496c24b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-10T16:36:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b0d70d85-fbb7-4af6-8c7c-874d0496c24b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T16:36:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b0d70d85-fbb7-4af6-8c7c-874d0496c24b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T16:36:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"252fc7e0-7dd2-4a37-acb9-65c1b3e765ac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:60330","PortSpecifier":{"PortValue":60330}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"252fc7e0-7dd2-4a37-acb9-65c1b3e765ac","method":"POST","path":"/ai-tenant-e2e-shared-a-c32d0d/rate-test-model-c32d0d/v1/completions","host":"e2e-shared-a-c32d0d.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T16:36:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"252fc7e0-7dd2-4a37-acb9-65c1b3e765ac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:60330","PortSpecifier":{"PortValue":60330}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783701379,"nanos":694725642},"http":{"id":"252fc7e0-7dd2-4a37-acb9-65c1b3e765ac","method":"POST","headers":{":authority":"e2e-shared-a-c32d0d.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c32d0d/rate-test-model-c32d0d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T16:36:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"252fc7e0-7dd2-4a37-acb9-65c1b3e765ac","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-tPDIVjnlxyZsSbKw_dbuG2keL1Q8O2lECe2QxI08a34pfIjawOJGXocB2n6Y"}
{"level":"debug","ts":"2026-07-10T16:36:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"252fc7e0-7dd2-4a37-acb9-65c1b3e765ac","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c32d0d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-tPDIVjnlxyZsSbKw_dbuG2keL1Q8O2lECe2QxI08a34pfIjawOJGXocB2n6Y\"}"}
{"level":"debug","ts":"2026-07-10T16:36:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"252fc7e0-7dd2-4a37-acb9-65c1b3e765ac","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c32d0d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"431930c2-3233-41d8-9d54-106f6dfb1bda","keyName":"e2e-rate-a-7c7b69","subscription":"e2e-rate-iso-a-7c7b69","tenant":"e2e-shared-a-c32d0d","userId":"431930c2-3233-41d8-9d54-106f6dfb1bda","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T16:36:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"252fc7e0-7dd2-4a37-acb9-65c1b3e765ac","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c32d0d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c32d0d/rate-test-model-c32d0d\",\"requestedSubscription\":\"e2e-rate-iso-a-7c7b69\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T16:36:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"252fc7e0-7dd2-4a37-acb9-65c1b3e765ac","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c32d0d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c32d0d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7c7b69","namespace":"ai-tenant-e2e-shared-a-c32d0d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T16:36:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"252fc7e0-7dd2-4a37-acb9-65c1b3e765ac","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T16:36:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"252fc7e0-7dd2-4a37-acb9-65c1b3e765ac","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:36:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"252fc7e0-7dd2-4a37-acb9-65c1b3e765ac","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:36:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"252fc7e0-7dd2-4a37-acb9-65c1b3e765ac","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c32d0d/rate-test-model-c32d0d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:36:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"252fc7e0-7dd2-4a37-acb9-65c1b3e765ac","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:36:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"252fc7e0-7dd2-4a37-acb9-65c1b3e765ac","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T16:36:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"252fc7e0-7dd2-4a37-acb9-65c1b3e765ac","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T16:36:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"252fc7e0-7dd2-4a37-acb9-65c1b3e765ac","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7c7b69"}
{"level":"debug","ts":"2026-07-10T16:36:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"252fc7e0-7dd2-4a37-acb9-65c1b3e765ac","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"431930c2-3233-41d8-9d54-106f6dfb1bda","keyName":"e2e-rate-a-7c7b69","selected_subscription":"e2e-rate-iso-a-7c7b69","selected_subscription_key":"ai-tenant-e2e-shared-a-c32d0d/e2e-rate-iso-a-7c7b69@ai-tenant-e2e-shared-a-c32d0d/rate-test-model-c32d0d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c32d0d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7c7b69","namespace":"ai-tenant-e2e-shared-a-c32d0d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T16:36:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"252fc7e0-7dd2-4a37-acb9-65c1b3e765ac","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T16:36:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"252fc7e0-7dd2-4a37-acb9-65c1b3e765ac","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T16:36:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"88334df0-c731-462c-afad-668b31ec238c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:60344","PortSpecifier":{"PortValue":60344}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"88334df0-c731-462c-afad-668b31ec238c","method":"POST","path":"/ai-tenant-e2e-shared-a-c32d0d/rate-test-model-c32d0d/v1/completions","host":"e2e-shared-a-c32d0d.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T16:36:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"88334df0-c731-462c-afad-668b31ec238c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:60344","PortSpecifier":{"PortValue":60344}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783701380,"nanos":788631258},"http":{"id":"88334df0-c731-462c-afad-668b31ec238c","method":"POST","headers":{":authority":"e2e-shared-a-c32d0d.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c32d0d/rate-test-model-c32d0d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T16:36:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"88334df0-c731-462c-afad-668b31ec238c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-tPDIVjnlxyZsSbKw_dbuG2keL1Q8O2lECe2QxI08a34pfIjawOJGXocB2n6Y"}
{"level":"debug","ts":"2026-07-10T16:36:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"88334df0-c731-462c-afad-668b31ec238c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c32d0d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-tPDIVjnlxyZsSbKw_dbuG2keL1Q8O2lECe2QxI08a34pfIjawOJGXocB2n6Y\"}"}
{"level":"debug","ts":"2026-07-10T16:36:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"88334df0-c731-462c-afad-668b31ec238c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c32d0d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"431930c2-3233-41d8-9d54-106f6dfb1bda","keyName":"e2e-rate-a-7c7b69","subscription":"e2e-rate-iso-a-7c7b69","tenant":"e2e-shared-a-c32d0d","userId":"431930c2-3233-41d8-9d54-106f6dfb1bda","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T16:36:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"88334df0-c731-462c-afad-668b31ec238c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c32d0d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c32d0d/rate-test-model-c32d0d\",\"requestedSubscription\":\"e2e-rate-iso-a-7c7b69\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T16:36:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"88334df0-c731-462c-afad-668b31ec238c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c32d0d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c32d0d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7c7b69","namespace":"ai-tenant-e2e-shared-a-c32d0d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T16:36:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"88334df0-c731-462c-afad-668b31ec238c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T16:36:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88334df0-c731-462c-afad-668b31ec238c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:36:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88334df0-c731-462c-afad-668b31ec238c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:36:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88334df0-c731-462c-afad-668b31ec238c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c32d0d/rate-test-model-c32d0d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:36:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88334df0-c731-462c-afad-668b31ec238c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:36:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"88334df0-c731-462c-afad-668b31ec238c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T16:36:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"88334df0-c731-462c-afad-668b31ec238c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T16:36:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"88334df0-c731-462c-afad-668b31ec238c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7c7b69"}
{"level":"debug","ts":"2026-07-10T16:36:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"88334df0-c731-462c-afad-668b31ec238c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"431930c2-3233-41d8-9d54-106f6dfb1bda","keyName":"e2e-rate-a-7c7b69","selected_subscription":"e2e-rate-iso-a-7c7b69","selected_subscription_key":"ai-tenant-e2e-shared-a-c32d0d/e2e-rate-iso-a-7c7b69@ai-tenant-e2e-shared-a-c32d0d/rate-test-model-c32d0d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c32d0d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7c7b69","namespace":"ai-tenant-e2e-shared-a-c32d0d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T16:36:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"88334df0-c731-462c-afad-668b31ec238c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T16:36:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"88334df0-c731-462c-afad-668b31ec238c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T16:36:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f2232bc3-8be6-422a-9c98-232cfd3ec6e3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:60356","PortSpecifier":{"PortValue":60356}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f2232bc3-8be6-422a-9c98-232cfd3ec6e3","method":"POST","path":"/ai-tenant-e2e-shared-a-c32d0d/rate-test-model-c32d0d/v1/completions","host":"e2e-shared-a-c32d0d.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T16:36:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f2232bc3-8be6-422a-9c98-232cfd3ec6e3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:60356","PortSpecifier":{"PortValue":60356}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783701381,"nanos":834168102},"http":{"id":"f2232bc3-8be6-422a-9c98-232cfd3ec6e3","method":"POST","headers":{":authority":"e2e-shared-a-c32d0d.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c32d0d/rate-test-model-c32d0d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T16:36:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f2232bc3-8be6-422a-9c98-232cfd3ec6e3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-tPDIVjnlxyZsSbKw_dbuG2keL1Q8O2lECe2QxI08a34pfIjawOJGXocB2n6Y"}
{"level":"debug","ts":"2026-07-10T16:36:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f2232bc3-8be6-422a-9c98-232cfd3ec6e3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c32d0d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-tPDIVjnlxyZsSbKw_dbuG2keL1Q8O2lECe2QxI08a34pfIjawOJGXocB2n6Y\"}"}
{"level":"debug","ts":"2026-07-10T16:36:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f2232bc3-8be6-422a-9c98-232cfd3ec6e3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c32d0d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"431930c2-3233-41d8-9d54-106f6dfb1bda","keyName":"e2e-rate-a-7c7b69","subscription":"e2e-rate-iso-a-7c7b69","tenant":"e2e-shared-a-c32d0d","userId":"431930c2-3233-41d8-9d54-106f6dfb1bda","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T16:36:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f2232bc3-8be6-422a-9c98-232cfd3ec6e3","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c32d0d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c32d0d/rate-test-model-c32d0d\",\"requestedSubscription\":\"e2e-rate-iso-a-7c7b69\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T16:36:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f2232bc3-8be6-422a-9c98-232cfd3ec6e3","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c32d0d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c32d0d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7c7b69","namespace":"ai-tenant-e2e-shared-a-c32d0d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T16:36:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f2232bc3-8be6-422a-9c98-232cfd3ec6e3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T16:36:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f2232bc3-8be6-422a-9c98-232cfd3ec6e3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:36:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f2232bc3-8be6-422a-9c98-232cfd3ec6e3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:36:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f2232bc3-8be6-422a-9c98-232cfd3ec6e3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c32d0d/rate-test-model-c32d0d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:36:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f2232bc3-8be6-422a-9c98-232cfd3ec6e3","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:36:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f2232bc3-8be6-422a-9c98-232cfd3ec6e3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T16:36:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f2232bc3-8be6-422a-9c98-232cfd3ec6e3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T16:36:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f2232bc3-8be6-422a-9c98-232cfd3ec6e3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7c7b69"}
{"level":"debug","ts":"2026-07-10T16:36:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f2232bc3-8be6-422a-9c98-232cfd3ec6e3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"431930c2-3233-41d8-9d54-106f6dfb1bda","keyName":"e2e-rate-a-7c7b69","selected_subscription":"e2e-rate-iso-a-7c7b69","selected_subscription_key":"ai-tenant-e2e-shared-a-c32d0d/e2e-rate-iso-a-7c7b69@ai-tenant-e2e-shared-a-c32d0d/rate-test-model-c32d0d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c32d0d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7c7b69","namespace":"ai-tenant-e2e-shared-a-c32d0d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T16:36:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f2232bc3-8be6-422a-9c98-232cfd3ec6e3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T16:36:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f2232bc3-8be6-422a-9c98-232cfd3ec6e3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T16:36:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ab9c68ac-b28c-44c0-bf8c-47d640337a76","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:40454","PortSpecifier":{"PortValue":40454}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ab9c68ac-b28c-44c0-bf8c-47d640337a76","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-c32d0d.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T16:36:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ab9c68ac-b28c-44c0-bf8c-47d640337a76","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:40454","PortSpecifier":{"PortValue":40454}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783701394,"nanos":780563727},"http":{"id":"ab9c68ac-b28c-44c0-bf8c-47d640337a76","method":"POST","headers":{":authority":"e2e-shared-a-c32d0d.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T16:36:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ab9c68ac-b28c-44c0-bf8c-47d640337a76","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T16:36:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ab9c68ac-b28c-44c0-bf8c-47d640337a76","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7a40ffd7-a182-4c3c-800e-1500d8c71f55","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=140fc507-4b2c-41b0-acee-fa2979abe5ce"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9a27fba088"]}}
{"level":"debug","ts":"2026-07-10T16:36:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ab9c68ac-b28c-44c0-bf8c-47d640337a76","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9a27fba088"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=140fc507-4b2c-41b0-acee-fa2979abe5ce"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7a40ffd7-a182-4c3c-800e-1500d8c71f55","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e49051792b57df5810fde9b861812a25231a47623393de5f45505cc93d8fbc54"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c32d0d.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T16:36:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ab9c68ac-b28c-44c0-bf8c-47d640337a76","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:36:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ab9c68ac-b28c-44c0-bf8c-47d640337a76","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:36:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ab9c68ac-b28c-44c0-bf8c-47d640337a76","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c32d0d/rate-test-model-c32d0d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:36:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ab9c68ac-b28c-44c0-bf8c-47d640337a76","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T16:36:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ab9c68ac-b28c-44c0-bf8c-47d640337a76","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T16:36:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ab9c68ac-b28c-44c0-bf8c-47d640337a76","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T16:36:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ab9c68ac-b28c-44c0-bf8c-47d640337a76","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T16:36:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ab9c68ac-b28c-44c0-bf8c-47d640337a76","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T16:36:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c5475480-87ec-4cf6-a7e6-a490b2afbbb3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:55138","PortSpecifier":{"PortValue":55138}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c5475480-87ec-4cf6-a7e6-a490b2afbbb3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-466b1a.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T16:36:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c5475480-87ec-4cf6-a7e6-a490b2afbbb3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:55138","PortSpecifier":{"PortValue":55138}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783701394,"nanos":820972585},"http":{"id":"c5475480-87ec-4cf6-a7e6-a490b2afbbb3","method":"POST","headers":{":authority":"e2e-shared-b-466b1a.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T16:36:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c5475480-87ec-4cf6-a7e6-a490b2afbbb3","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T16:36:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c5475480-87ec-4cf6-a7e6-a490b2afbbb3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7a40ffd7-a182-4c3c-800e-1500d8c71f55","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=140fc507-4b2c-41b0-acee-fa2979abe5ce"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9a27fba088"]}}
{"level":"debug","ts":"2026-07-10T16:36:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c5475480-87ec-4cf6-a7e6-a490b2afbbb3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9a27fba088"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=140fc507-4b2c-41b0-acee-fa2979abe5ce"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7a40ffd7-a182-4c3c-800e-1500d8c71f55","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e838baba826e016bf3e907ef3289699aedfd7707968047696d2bc8d7dffeb8b7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-466b1a.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T16:36:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5475480-87ec-4cf6-a7e6-a490b2afbbb3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:36:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5475480-87ec-4cf6-a7e6-a490b2afbbb3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:36:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5475480-87ec-4cf6-a7e6-a490b2afbbb3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-466b1a/rate-test-model-466b1a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:36:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c5475480-87ec-4cf6-a7e6-a490b2afbbb3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T16:36:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c5475480-87ec-4cf6-a7e6-a490b2afbbb3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T16:36:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c5475480-87ec-4cf6-a7e6-a490b2afbbb3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T16:36:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c5475480-87ec-4cf6-a7e6-a490b2afbbb3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T16:36:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c5475480-87ec-4cf6-a7e6-a490b2afbbb3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T16:36:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"59b7567f-ab07-4f20-98ae-1381db24b36f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:40462","PortSpecifier":{"PortValue":40462}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"59b7567f-ab07-4f20-98ae-1381db24b36f","method":"POST","path":"/ai-tenant-e2e-shared-a-c32d0d/rate-test-model-c32d0d/v1/completions","host":"e2e-shared-a-c32d0d.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T16:36:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"59b7567f-ab07-4f20-98ae-1381db24b36f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:40462","PortSpecifier":{"PortValue":40462}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783701394,"nanos":861686647},"http":{"id":"59b7567f-ab07-4f20-98ae-1381db24b36f","method":"POST","headers":{":authority":"e2e-shared-a-c32d0d.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c32d0d/rate-test-model-c32d0d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T16:36:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"59b7567f-ab07-4f20-98ae-1381db24b36f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-FApwXJt0mK99uR51_hwOx62tUZippM7W29mGccPHBvNt1zMWhSuM10lO7Ctd"}
{"level":"debug","ts":"2026-07-10T16:36:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"59b7567f-ab07-4f20-98ae-1381db24b36f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c32d0d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-FApwXJt0mK99uR51_hwOx62tUZippM7W29mGccPHBvNt1zMWhSuM10lO7Ctd\"}"}
{"level":"debug","ts":"2026-07-10T16:36:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"59b7567f-ab07-4f20-98ae-1381db24b36f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c32d0d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"462470d7-8089-49c4-9f0a-374020d07fe7","keyName":"e2e-rate-a-210df5","subscription":"e2e-rate-iso-a-210df5","tenant":"e2e-shared-a-c32d0d","userId":"462470d7-8089-49c4-9f0a-374020d07fe7","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T16:36:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"59b7567f-ab07-4f20-98ae-1381db24b36f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c32d0d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c32d0d/rate-test-model-c32d0d\",\"requestedSubscription\":\"e2e-rate-iso-a-210df5\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T16:36:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"59b7567f-ab07-4f20-98ae-1381db24b36f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c32d0d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c32d0d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-210df5","namespace":"ai-tenant-e2e-shared-a-c32d0d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T16:36:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"59b7567f-ab07-4f20-98ae-1381db24b36f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T16:36:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"59b7567f-ab07-4f20-98ae-1381db24b36f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:36:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"59b7567f-ab07-4f20-98ae-1381db24b36f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:36:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"59b7567f-ab07-4f20-98ae-1381db24b36f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c32d0d/rate-test-model-c32d0d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:36:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"59b7567f-ab07-4f20-98ae-1381db24b36f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:36:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"59b7567f-ab07-4f20-98ae-1381db24b36f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-210df5"}
{"level":"debug","ts":"2026-07-10T16:36:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"59b7567f-ab07-4f20-98ae-1381db24b36f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T16:36:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"59b7567f-ab07-4f20-98ae-1381db24b36f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T16:36:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"59b7567f-ab07-4f20-98ae-1381db24b36f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"462470d7-8089-49c4-9f0a-374020d07fe7","keyName":"e2e-rate-a-210df5","selected_subscription":"e2e-rate-iso-a-210df5","selected_subscription_key":"ai-tenant-e2e-shared-a-c32d0d/e2e-rate-iso-a-210df5@ai-tenant-e2e-shared-a-c32d0d/rate-test-model-c32d0d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c32d0d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-210df5","namespace":"ai-tenant-e2e-shared-a-c32d0d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T16:36:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"59b7567f-ab07-4f20-98ae-1381db24b36f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T16:36:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"59b7567f-ab07-4f20-98ae-1381db24b36f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T16:36:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1786fdad-6c65-4c3a-9742-93fd1d20e2a0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:40464","PortSpecifier":{"PortValue":40464}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1786fdad-6c65-4c3a-9742-93fd1d20e2a0","method":"POST","path":"/ai-tenant-e2e-shared-a-c32d0d/rate-test-model-c32d0d/v1/completions","host":"e2e-shared-a-c32d0d.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T16:36:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1786fdad-6c65-4c3a-9742-93fd1d20e2a0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:40464","PortSpecifier":{"PortValue":40464}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783701395,"nanos":903371983},"http":{"id":"1786fdad-6c65-4c3a-9742-93fd1d20e2a0","method":"POST","headers":{":authority":"e2e-shared-a-c32d0d.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c32d0d/rate-test-model-c32d0d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T16:36:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1786fdad-6c65-4c3a-9742-93fd1d20e2a0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-FApwXJt0mK99uR51_hwOx62tUZippM7W29mGccPHBvNt1zMWhSuM10lO7Ctd"}
{"level":"debug","ts":"2026-07-10T16:36:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1786fdad-6c65-4c3a-9742-93fd1d20e2a0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c32d0d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-FApwXJt0mK99uR51_hwOx62tUZippM7W29mGccPHBvNt1zMWhSuM10lO7Ctd\"}"}
{"level":"debug","ts":"2026-07-10T16:36:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1786fdad-6c65-4c3a-9742-93fd1d20e2a0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c32d0d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"462470d7-8089-49c4-9f0a-374020d07fe7","keyName":"e2e-rate-a-210df5","subscription":"e2e-rate-iso-a-210df5","tenant":"e2e-shared-a-c32d0d","userId":"462470d7-8089-49c4-9f0a-374020d07fe7","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T16:36:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1786fdad-6c65-4c3a-9742-93fd1d20e2a0","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c32d0d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c32d0d/rate-test-model-c32d0d\",\"requestedSubscription\":\"e2e-rate-iso-a-210df5\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T16:36:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1786fdad-6c65-4c3a-9742-93fd1d20e2a0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c32d0d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c32d0d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-210df5","namespace":"ai-tenant-e2e-shared-a-c32d0d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T16:36:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1786fdad-6c65-4c3a-9742-93fd1d20e2a0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T16:36:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1786fdad-6c65-4c3a-9742-93fd1d20e2a0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:36:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1786fdad-6c65-4c3a-9742-93fd1d20e2a0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:36:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1786fdad-6c65-4c3a-9742-93fd1d20e2a0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c32d0d/rate-test-model-c32d0d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:36:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1786fdad-6c65-4c3a-9742-93fd1d20e2a0","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:36:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1786fdad-6c65-4c3a-9742-93fd1d20e2a0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-210df5"}
{"level":"debug","ts":"2026-07-10T16:36:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1786fdad-6c65-4c3a-9742-93fd1d20e2a0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T16:36:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1786fdad-6c65-4c3a-9742-93fd1d20e2a0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T16:36:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1786fdad-6c65-4c3a-9742-93fd1d20e2a0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"462470d7-8089-49c4-9f0a-374020d07fe7","keyName":"e2e-rate-a-210df5","selected_subscription":"e2e-rate-iso-a-210df5","selected_subscription_key":"ai-tenant-e2e-shared-a-c32d0d/e2e-rate-iso-a-210df5@ai-tenant-e2e-shared-a-c32d0d/rate-test-model-c32d0d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c32d0d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-210df5","namespace":"ai-tenant-e2e-shared-a-c32d0d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T16:36:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1786fdad-6c65-4c3a-9742-93fd1d20e2a0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T16:36:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1786fdad-6c65-4c3a-9742-93fd1d20e2a0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T16:36:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7cfcb340-2955-4d70-a89a-926526dbbc42","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:40474","PortSpecifier":{"PortValue":40474}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7cfcb340-2955-4d70-a89a-926526dbbc42","method":"POST","path":"/ai-tenant-e2e-shared-a-c32d0d/rate-test-model-c32d0d/v1/completions","host":"e2e-shared-a-c32d0d.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T16:36:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7cfcb340-2955-4d70-a89a-926526dbbc42","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:40474","PortSpecifier":{"PortValue":40474}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783701396,"nanos":942430854},"http":{"id":"7cfcb340-2955-4d70-a89a-926526dbbc42","method":"POST","headers":{":authority":"e2e-shared-a-c32d0d.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c32d0d/rate-test-model-c32d0d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T16:36:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7cfcb340-2955-4d70-a89a-926526dbbc42","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-FApwXJt0mK99uR51_hwOx62tUZippM7W29mGccPHBvNt1zMWhSuM10lO7Ctd"}
{"level":"debug","ts":"2026-07-10T16:36:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7cfcb340-2955-4d70-a89a-926526dbbc42","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c32d0d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-FApwXJt0mK99uR51_hwOx62tUZippM7W29mGccPHBvNt1zMWhSuM10lO7Ctd\"}"}
{"level":"debug","ts":"2026-07-10T16:36:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7cfcb340-2955-4d70-a89a-926526dbbc42","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c32d0d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"462470d7-8089-49c4-9f0a-374020d07fe7","keyName":"e2e-rate-a-210df5","subscription":"e2e-rate-iso-a-210df5","tenant":"e2e-shared-a-c32d0d","userId":"462470d7-8089-49c4-9f0a-374020d07fe7","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T16:36:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7cfcb340-2955-4d70-a89a-926526dbbc42","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c32d0d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c32d0d/rate-test-model-c32d0d\",\"requestedSubscription\":\"e2e-rate-iso-a-210df5\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T16:36:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7cfcb340-2955-4d70-a89a-926526dbbc42","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c32d0d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c32d0d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-210df5","namespace":"ai-tenant-e2e-shared-a-c32d0d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T16:36:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7cfcb340-2955-4d70-a89a-926526dbbc42","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T16:36:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7cfcb340-2955-4d70-a89a-926526dbbc42","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:36:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7cfcb340-2955-4d70-a89a-926526dbbc42","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:36:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7cfcb340-2955-4d70-a89a-926526dbbc42","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c32d0d/rate-test-model-c32d0d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:36:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7cfcb340-2955-4d70-a89a-926526dbbc42","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:36:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7cfcb340-2955-4d70-a89a-926526dbbc42","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-210df5"}
{"level":"debug","ts":"2026-07-10T16:36:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7cfcb340-2955-4d70-a89a-926526dbbc42","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T16:36:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7cfcb340-2955-4d70-a89a-926526dbbc42","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T16:36:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7cfcb340-2955-4d70-a89a-926526dbbc42","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"462470d7-8089-49c4-9f0a-374020d07fe7","keyName":"e2e-rate-a-210df5","selected_subscription":"e2e-rate-iso-a-210df5","selected_subscription_key":"ai-tenant-e2e-shared-a-c32d0d/e2e-rate-iso-a-210df5@ai-tenant-e2e-shared-a-c32d0d/rate-test-model-c32d0d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c32d0d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-210df5","namespace":"ai-tenant-e2e-shared-a-c32d0d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T16:36:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7cfcb340-2955-4d70-a89a-926526dbbc42","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T16:36:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7cfcb340-2955-4d70-a89a-926526dbbc42","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T16:36:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3406f894-ba0c-4f0e-8d24-108a48510457","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:55144","PortSpecifier":{"PortValue":55144}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3406f894-ba0c-4f0e-8d24-108a48510457","method":"POST","path":"/ai-tenant-e2e-shared-b-466b1a/rate-test-model-466b1a/v1/completions","host":"e2e-shared-b-466b1a.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T16:36:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3406f894-ba0c-4f0e-8d24-108a48510457","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:55144","PortSpecifier":{"PortValue":55144}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783701396,"nanos":981189098},"http":{"id":"3406f894-ba0c-4f0e-8d24-108a48510457","method":"POST","headers":{":authority":"e2e-shared-b-466b1a.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-466b1a/rate-test-model-466b1a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T16:36:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3406f894-ba0c-4f0e-8d24-108a48510457","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Q0OVbpCCR6Pp3GrF_Hhd8171nUIrEwwPKDgmL7VsfDeuKxXX1XC77qlXQwxF"}
{"level":"debug","ts":"2026-07-10T16:36:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3406f894-ba0c-4f0e-8d24-108a48510457","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-466b1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Q0OVbpCCR6Pp3GrF_Hhd8171nUIrEwwPKDgmL7VsfDeuKxXX1XC77qlXQwxF\"}"}
{"level":"debug","ts":"2026-07-10T16:36:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3406f894-ba0c-4f0e-8d24-108a48510457","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-466b1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7fe8641d-86d3-40e4-9d92-319e7d2526a6","keyName":"e2e-rate-b-210df5","subscription":"e2e-rate-iso-b-210df5","tenant":"e2e-shared-b-466b1a","userId":"7fe8641d-86d3-40e4-9d92-319e7d2526a6","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T16:36:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3406f894-ba0c-4f0e-8d24-108a48510457","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-466b1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-466b1a/rate-test-model-466b1a\",\"requestedSubscription\":\"e2e-rate-iso-b-210df5\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T16:36:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3406f894-ba0c-4f0e-8d24-108a48510457","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-466b1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-466b1a","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-210df5","namespace":"ai-tenant-e2e-shared-b-466b1a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T16:36:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3406f894-ba0c-4f0e-8d24-108a48510457","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T16:36:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3406f894-ba0c-4f0e-8d24-108a48510457","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:36:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3406f894-ba0c-4f0e-8d24-108a48510457","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:36:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3406f894-ba0c-4f0e-8d24-108a48510457","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-466b1a/rate-test-model-466b1a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:36:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3406f894-ba0c-4f0e-8d24-108a48510457","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:36:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3406f894-ba0c-4f0e-8d24-108a48510457","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T16:36:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3406f894-ba0c-4f0e-8d24-108a48510457","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T16:36:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3406f894-ba0c-4f0e-8d24-108a48510457","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-210df5"}
{"level":"debug","ts":"2026-07-10T16:36:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3406f894-ba0c-4f0e-8d24-108a48510457","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7fe8641d-86d3-40e4-9d92-319e7d2526a6","keyName":"e2e-rate-b-210df5","selected_subscription":"e2e-rate-iso-b-210df5","selected_subscription_key":"ai-tenant-e2e-shared-b-466b1a/e2e-rate-iso-b-210df5@ai-tenant-e2e-shared-b-466b1a/rate-test-model-466b1a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-466b1a","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-210df5","namespace":"ai-tenant-e2e-shared-b-466b1a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T16:36:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3406f894-ba0c-4f0e-8d24-108a48510457","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T16:36:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3406f894-ba0c-4f0e-8d24-108a48510457","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T16:36:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c3ec29e5502cf0b51a77c55ae319bdffd4b9ca89604704be78329ed1fb17c580"}
{"level":"info","ts":"2026-07-10T16:36:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6294409d08059efda77d6650765745a12e4a9ebbf11dc615944239b094847d33"}
{"level":"info","ts":"2026-07-10T16:36:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0c334e0860c9dafe612b840c5bb1161425e10424bd1c37f7860f29cefaba32e0"}
{"level":"info","ts":"2026-07-10T16:36:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8718cca200123536ff9c6a928499f568651f0fb2029df043192484544fdf7e99"}
{"level":"info","ts":"2026-07-10T16:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ef913707cf8652d878813c745b2956f6e49427904b4b23f6deada0eab53097bd"}
{"level":"info","ts":"2026-07-10T16:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8a0c4e7db32efac6e8ab7829a97bb419d70ba52ed9b0a5369bdf8cadf16e9d5b"}
{"level":"info","ts":"2026-07-10T16:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/322b62bcac7d60f239b25acc0bc2b6e0f3a521e7d68cd4f823a9a0942e1d92b7"}
{"level":"info","ts":"2026-07-10T16:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/760233e7f89996db8d3b5f13d4c76b2d18872ff03c5ab8c81d14787d19a778d8"}
{"level":"info","ts":"2026-07-10T16:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2e516db5c23ed85154435a02e7e13f25eddace5aafffc877b0b36f6bfaeb4881"}
{"level":"info","ts":"2026-07-10T16:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13"}
{"level":"info","ts":"2026-07-10T16:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b67e34b1a70d02e5ee56d407b442a890ee357bc12178d3c5bf8458ed3652d71d"}
{"level":"info","ts":"2026-07-10T16:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c3bca17de12febca254d71d271a442cf75031cf31345eedb3f1d9406acc23190"}
{"level":"info","ts":"2026-07-10T16:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1e39934c9ec24489795a53694d0c4e390d8511304a4f93ddb7a78a63792359cc"}
{"level":"info","ts":"2026-07-10T16:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/97db275f2b0b511a678a57d101a193017967e9ed1ea084ede5a26168e46b1c46"}
{"level":"info","ts":"2026-07-10T16:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5d982ef5207c517b564d619db07c813e42cb0590f1d95878c47e0b1f10f2ee72"}
{"level":"info","ts":"2026-07-10T16:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3c3b0275187ba1375b7934fab861395b2b4769be59dc5e596787a213d43b574b"}
{"level":"info","ts":"2026-07-10T16:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7721743ad43c20bb21e8bfc1f5884927cdb097bfbb99562ebf2df3758f664b96"}
{"level":"info","ts":"2026-07-10T16:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f82f20d238e2ca215eff3d03db3f776b2de4f33dd8ec5567b7ccd28186e798a2"}
{"level":"info","ts":"2026-07-10T16:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e49051792b57df5810fde9b861812a25231a47623393de5f45505cc93d8fbc54"}
{"level":"info","ts":"2026-07-10T16:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9b85944d46cb0fc25a732050670e3c03c485e9f3366f7b98af2162775b3fd965"}
{"level":"info","ts":"2026-07-10T16:37:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/93c555b1065512c5684811d38f24e050e04f087a711f9950c3b4d132b51540f2"}
{"level":"info","ts":"2026-07-10T16:37:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9a5c276c68701b91aa220d9445d305e58706ac1451887ccb2873ccfb5b643af6"}
{"level":"info","ts":"2026-07-10T16:37:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e838baba826e016bf3e907ef3289699aedfd7707968047696d2bc8d7dffeb8b7"}
{"level":"info","ts":"2026-07-10T16:37:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d9820940ea561ac7233f172e32ee5331166ec7b68699ae5eb20ae3735d956d6c"}